Rule Info
Name
Service StartupType Change Via PowerShell Set-Service
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects the use of the PowerShell "Set-Service" cmdlet to change the startup type of a service to "disabled" or "manual"
Reference
Date
2023-03-04 00:00:00
Modified
None
Id
62b20d44-1546-4e61-afce-8e175eb9473c
Tags
attack.execution attack.defense-evasion attack.t1562.001
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Nasreddine Bencherchali
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12
github-actions[bot]
chore: promote older rules status from `experimental` to `test` (#4651)
2024-01-01
Scan your endpoints, forensic images or collected files with our portable scanner THOR