CobaltStrike Service Installations - System — Detection Rule
Detects known malicious service installs that appear in cases in which a Cobalt Strike beacon elevates privileges or lateral movement
Detects known malicious service installs that appear in cases in which a Cobalt Strike beacon elevates privileges or lateral movement