1200KM / tag
system — logsource-service tag
55 related reference pages for logsource-service: system.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- Active Directory Certificate Services Denied Certificate Enrollment Request · sigma-rule
- CobaltStrike Service Installations - System · sigma-rule
- Crash Dump Created By Operating System · sigma-rule
- Credential Dumping Tools Service Execution - System · sigma-rule
- Critical Hive In Suspicious Location Access Bits Cleared · sigma-rule
- CSExec Service Installation · sigma-rule
- DHCP Server Error Failed Loading the CallOut DLL · sigma-rule
- DHCP Server Loaded the CallOut DLL · sigma-rule
- Eventlog Cleared · sigma-rule
- HackTool Service Registration or Execution · sigma-rule
- Important Windows Eventlog Cleared · sigma-rule
- Invoke-Obfuscation CLIP+ Launcher - System · sigma-rule
- Invoke-Obfuscation COMPRESS OBFUSCATION - System · sigma-rule
- Invoke-Obfuscation Obfuscated IEX Invocation - System · sigma-rule
- Invoke-Obfuscation RUNDLL LAUNCHER - System · sigma-rule
- Invoke-Obfuscation STDIN+ Launcher - System · sigma-rule
- Invoke-Obfuscation VAR+ Launcher - System · sigma-rule
- Invoke-Obfuscation VAR++ LAUNCHER OBFUSCATION - System · sigma-rule
- Invoke-Obfuscation Via Stdin - System · sigma-rule
- Invoke-Obfuscation Via Use Clip - System · sigma-rule
- Invoke-Obfuscation Via Use MSHTA - System · sigma-rule
- Invoke-Obfuscation Via Use Rundll32 - System · sigma-rule
- ISATAP Router Address Was Set · sigma-rule
- KrbRelayUp Service Installation · sigma-rule
- Local Privilege Escalation Indicator TabTip · sigma-rule
- Mesh Agent Service Installation · sigma-rule
- Meterpreter or Cobalt Strike Getsystem Service Installation - System · sigma-rule
- Moriya Rootkit - System · sigma-rule
- New PDQDeploy Service - Client Side · sigma-rule
- New PDQDeploy Service - Server Side · sigma-rule
- No Suitable Encryption Key Found For Generating Kerberos Ticket · sigma-rule
- NTFS Vulnerability Exploitation · sigma-rule
- NTLMv1 Logon Between Client and Server · sigma-rule
- PAExec Service Installation · sigma-rule
- PowerShell Scripts Installed as Services · sigma-rule
- ProcessHacker Privilege Elevation · sigma-rule
- PsExec Service Installation · sigma-rule
- RemCom Service Installation · sigma-rule
- Remote Access Tool Services Have Been Installed - System · sigma-rule
- Service Installation in Suspicious Folder · sigma-rule
- Service Installation with Suspicious Folder Pattern · sigma-rule
- Service Installed By Unusual Client - System · sigma-rule
- Sliver C2 Default Service Installation · sigma-rule
- smbexec.py Service Installation · sigma-rule
- Suspicious Service Installation · sigma-rule
- Suspicious Service Installation Script · sigma-rule
- Sysmon Application Crashed · sigma-rule
- TacticalRMM Service Installation · sigma-rule
- Tap Driver Installation · sigma-rule
- Uncommon Service Installation Image Path · sigma-rule
- Volume Shadow Copy Mount · sigma-rule
- Vulnerable Netlogon Secure Channel Connection Allowed · sigma-rule
- Windows Defender Threat Detection Service Disabled · sigma-rule
- Windows Update Error · sigma-rule
- Zerologon Exploitation Using Well-known Tools · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.