Stop Windows Service Via Net.EXE (88872991-7445-4a22-90b2-a3adadb0e827)
Detects the stopping of a Windows service via the "net" utility.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Stop Windows Service Via Net.EXE (88872991-7445-4a22-90b2-a3adadb0e827) | Sigma-Rules | Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b) | Attack Pattern | 1 |