This policy setting controls whether raw volume write notifications are sent to behavior monitoring.
If you enable or do not configure this setting, raw write notifications will be enabled.
If you disable this setting, raw write notifications be disabled.
| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | Software\Policies\Microsoft\Microsoft Antimalware\Real-Time Protection |
| Value Name | DisableRawWriteNotification |
| Value Type | REG_DWORD |
| Enabled Value | 0 |
| Disabled Value | 1 |