implementing-anti-ransomware-group-policy

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs making system-wide, privileged changes to Group Policy and Defender settings (requiring Domain Admin/GPO Creator privileges), which directly modify the machine/domain state and therefore should be flagged.