Stop Windows Service Via Net.EXE

Rule Info

Tags
attack.impact DEMO attack.t1489
Modified
None
Author
Jakob Weinzettl, oscd.community, Nasreddine Bencherchali (Nextron Systems)
Name
Stop Windows Service Via Net.EXE
Description
Detects the stopping of a Windows service
Date
2023-03-05 00:00:00
Reference
None
Id
88872991-7445-4a22-90b2-a3adadb0e827
Type
Community Rule

Rule History

Commit
Date
Author
Title
2023-03-07
Nasreddine Bencherchali
fix: apply suggestions from code review
2023-03-06
Nasreddine Bencherchali
feat: more updates