Defence evasion
Adversaries either hide from your defences or switch them off, and the second is more common than people expect.
Disabling logging, uninstalling the agent, adding an exclusion, running in a mode the tool cannot see. It is worth monitoring your security tooling for tampering as closely as you monitor anything else, because an attacker turning it off produces silence, and silence looks like safety.
Checked against the primary source.