Stop Windows Service Via PowerShell Stop-Service (c49c5062-0966-4170-9efd-9968c913a6cf)
Detects the stopping of a Windows service via the PowerShell Cmdlet "Stop-Service"
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Stop Windows Service Via PowerShell Stop-Service (c49c5062-0966-4170-9efd-9968c913a6cf) | Sigma-Rules | Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b) | Attack Pattern | 1 |