Add Defender administrative settings related another registry path

[swachchhanda000]

[Copilot]

Pull Request Overview

This PR adds monitoring for Defender’s main registry path (HKLM\SOFTWARE\Microsoft\Windows Defender\) in addition to the existing Policies path.

• Added a new <TargetObject> entry for the Defender root registry key in both export and block configurations.
• Ensured consistent coverage across sysmonconfig-export.xml and sysmonconfig-export-block.xml.

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
sysmonconfig-export.xml	Added <TargetObject> to watch HKLM\SOFTWARE\Microsoft\Windows Defender\
sysmonconfig-export-block.xml	Added <TargetObject> to watch HKLM\SOFTWARE\Microsoft\Windows Defender\

Comments suppressed due to low confidence (2)

sysmonconfig-export.xml:837

• Add an inline comment to describe what settings under HKLM\SOFTWARE\Microsoft\Windows Defender\ this rule is targeting, similar to the prior Policies path entry.

			<TargetObject condition="begin with">HKLM\SOFTWARE\Microsoft\Windows Defender\</TargetObject>

sysmonconfig-export-block.xml:794

• Add an inline comment to clarify the purpose of monitoring the Defender root registry key, matching the style of the existing comment for the Policies path.

			<TargetObject condition="begin with">HKLM\SOFTWARE\Microsoft\Windows Defender\</TargetObject>