Velociraptor Service Installation

Detects the installation of the Velociraptor agent as a Windows service, a technique used by threat actors for persistence and command and control (C2).