Microsoft Windows Defender
Named by 2 kept items in this workspace.
Search every workspace for Microsoft Windows Defender. It matches the name as written, so it can find other things that share it.
The items that name it 2
Security product targeted by CRUDEEXCLUDE, which adds exclusion paths to evade detection.
New rule for detection of disabling via SystemSettingsAdminFlows.EXE
All technologies in this workspace.