Sysinternals PsService Execution
Detects the execution of Sysinternals PsService, a utility that can be used for service reconnaissance, management, and potential tampering. This tool can be leveraged by adversaries for discovery, privilege escalation, or persistence by interacting with Windows services.
Sigma
