Sysinternals PsService Execution — Detection Rule

Detects usage of Sysinternals PsService which can be abused for service reconnaissance and tampering

Read the full analysis on IntelFusions