Renamed PsExec Service Execution

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects suspicious launch of a renamed version of the PSEXESVC service with, which is not often used by legitimate administrators