diff --git a/EDR_telem_windows.json b/EDR_telem_windows.json
index 6c2c2b3..eba084d 100644
--- a/EDR_telem_windows.json
+++ b/EDR_telem_windows.json
@@ -1137,7 +1137,7 @@
     "Telemetry Feature Category": "Other Relevant Events",
     "Sub-Category": "Group Policy Modification",
     "BitDefender": "No",
-    "C-Prot": "No",
+    "C-Prot": "Yes",
     "Carbon Black": "No",
     "Cortex XDR": "Via EventLogs",
     "CrowdStrike": "No",