Suspicious Execution of Sc to Delete AV Services
Detects when attackers use "sc.exe" to delete AV services from the system in order to avoid detection
Sigma

Detects when attackers use "sc.exe" to delete AV services from the system in order to avoid detection

Already have an account?