Stop Windows Service Via Sc.EXE — Detection Rule

Detects the stopping of a Windows service via the "sc.exe" utility

Read the full analysis on IntelFusions