Search and filter across all detection sources
10 rules
Suspicious Service Installation
Detects suspicious service installation commands
Suspicious Service Installation Script
Detects suspicious service installation scripts
Service Installation in Suspicious Folder
Detects service installation in suspicious folder appdata
Service Installation with Suspicious Folder Pattern
Detects service installation with suspicious folder patterns
Uncommon Service Installation Image Path
Detects uncommon service installation commands by looking at suspicious or uncommon image path values containing references to encoded powershell commands, temporary paths, etc.