Stop Security Health Service
Detects attempts to stop the Windows SecurityHealthService using the 'sc.exe' command-line utility. This service is crucial for Windows security features, and its termination could indicate an attempt to disable security protections.
Microsoft Sentinel (KQL)
