PsExec Service File Creation (259e5a6a-b8d2-4c38-86e2-26c5e651361d)

Detects default PsExec service filename which indicates PsExec service installation and execution

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
PsExec Service File Creation (259e5a6a-b8d2-4c38-86e2-26c5e651361d)	Sigma-Rules	Service Execution - T1569.002 (f1951e8a-500e-4a26-8803-76d95c4554b4)	Attack Pattern	1
System Services - T1569 (d157f9d2-d09a-4efa-bb2a-64963f94e253)	Attack Pattern	Service Execution - T1569.002 (f1951e8a-500e-4a26-8803-76d95c4554b4)	Attack Pattern	2