Stop Windows Service Via PowerShell Stop-Service

Rule Info

Tags
attack.impact DEMO attack.t1489
Modified
None
Author
Jakob Weinzettl, oscd.community, Nasreddine Bencherchali (Nextron Systems)
Name
Stop Windows Service Via PowerShell Stop-Service
Description
Detects the stopping of a Windows service
Date
2023-03-05 00:00:00
Reference
None
Id
c49c5062-0966-4170-9efd-9968c913a6cf
Type
Community Rule

Rule History

Commit
Date
Author
Title
2023-03-07
Nasreddine Bencherchali
fix: apply suggestions from code review
2023-03-06
Nasreddine Bencherchali
feat: more updates