Disable Or Stop Services (de25eeb8-3655-4643-ac3a-b662d3f26b6b)
Detects the usage of utilities such as 'systemctl', 'service'...etc to stop or disable tools and services on Linux systems. Attackers may stop or disable security tools and services to evade detection, maintain persistence, or disrupt system operations.