Stop Windows Service Via Sc.EXE

Rule Info

Tags
attack.impact DEMO attack.t1489
Modified
None
Author
Jakob Weinzettl, oscd.community, Nasreddine Bencherchali (Nextron Systems)
Name
Stop Windows Service Via Sc.EXE
Description
Detects the stopping of a Windows service
Date
2023-03-05 00:00:00
Reference
None
Id
81bcb81b-5b1f-474b-b373-52c871aaa7b1
Type
Community Rule

Rule History

Commit
Date
Author
Title
2023-03-07
Nasreddine Bencherchali
fix: apply suggestions from code review
2023-03-06
Nasreddine Bencherchali
feat: more updates