Stop Windows Service Via Sc.EXE (81bcb81b-5b1f-474b-b373-52c871aaa7b1)
Detects the stopping of a Windows service via the "sc.exe" utility
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Stop Windows Service Via Sc.EXE (81bcb81b-5b1f-474b-b373-52c871aaa7b1) | Sigma-Rules | Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b) | Attack Pattern | 1 |