Service permissions hijacked for privileges abuse (service)

Detects scenarios where an attacker modify the permissions of a service in order to abuse its privileges