Rule Info
Tags
attack.impact DEMO attack.t1489
Modified
None
Author
Jakob Weinzettl, oscd.community, Nasreddine Bencherchali (Nextron Systems)
Name
Stop Windows Service Via Sc.EXE
Description
Detects the stopping of a Windows service
Date
2023-03-05 00:00:00
Reference
None
Id
81bcb81b-5b1f-474b-b373-52c871aaa7b1
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR