SC.EXE Service Query Execution
Detects the execution of 'sc.exe' with the 'query' command-line argument to gather information about registered services on a Windows system. This activity can be indicative of discovery efforts by an attacker.
Sigma
Detects the execution of 'sc.exe' with the 'query' command-line argument to gather information about registered services on a Windows system. This activity can be indicative of discovery efforts by an attacker.
Already have an account?