Sysinternals PsService Execution

SigmaHQ Detections@sigmaHQ

•updated Jul 1, 2026•0•0•1

Detects usage of Sysinternals PsService which can be abused for service reconnaissance and tampering