Suspicious Windows Service Tampering

심각도 높음 Sigma 탐지 룰. Detects the usage of binaries such as 'net', 'sc' or 'powershell' in order to stop, pause, disable or delete critical or important Windows s…

작성자: Nasreddine Bencherchali (Nextron Systems), frack113 , X__Junior (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본