Hide Navigation Hide TOC New Service Creation Using PowerShell (c02e96b7-c63a-4c47-bd83-4a9f74afcfb2) Detects the creation of a new service using powershell. Cluster A Galaxy A Cluster B Galaxy B Level Windows Service - T1543.003 (2959d63f-73fd-46a1-abd2-109d7dcede32) Attack Pattern New Service Creation Using PowerShell (c02e96b7-c63a-4c47-bd83-4a9f74afcfb2) Sigma-Rules 1 Windows Service - T1543.003 (2959d63f-73fd-46a1-abd2-109d7dcede32) Attack Pattern Create or Modify System Process - T1543 (106c0cf6-bf73-4601-9aa8-0945c2715ec5) Attack Pattern 2