Microsoft Defender Antivirus Signatures Removed With MpCmdRun

Detects attempts to remove Microsoft Defender Antivirus (MDAV) Signatures using MpCmdRun legitimate MDAV executable. No signatures mean MDAV will be less effective (or completely useless depending on the option used).