service-installation▌

1 indexed skills · max 10 per page

skills (1)

hunting-for-unusual-service-installations

mukul975/Anthropic-Cybersecurity-Skills · hunting-for-unusual-service-installations

Detect suspicious Windows service installations (MITRE ATT&CK T1543.003) by parsing System event logs for Event ID 7045, analyzing service binary paths, and identifying indicators of persistence mechanisms.