|
gptkbp:instanceOf
|
Operating System Component
|
|
gptkbp:alsoKnownAs
|
gptkb:NT_Services
|
|
gptkbp:auditedBy
|
gptkb:Sysinternals_tools
gptkb:Process_Explorer
gptkb:Autoruns
gptkb:Event_Viewer
PowerShell scripts
Security logs
|
|
gptkbp:canBe
|
gptkb:software
gptkb:operating_system
gptkb:Windows_Defender
gptkb:Windows_Search
gptkb:Windows_Update
gptkb:Web_servers
gptkb:Remote_Desktop_Services
File sharing
Bluetooth support
Network services
Task scheduling
Device management
Time synchronization
Backup services
Network discovery
Antivirus services
Database servers
Firewall services
Indexing services
Monitoring services
Print spooler
Running background tasks
Running server applications
Smart card services
System maintenance
services.msc
|
|
gptkbp:canBeDependentOn
|
Other services
|
|
gptkbp:canBeDeployedOn
|
gptkb:InstallUtil.exe
gptkb:sc.exe
gptkb:PowerShell
|
|
gptkbp:canBeManagedBy
|
gptkb:Services_Control_Manager
|
|
gptkbp:canBeRestartedBy
|
gptkb:Services_MMC_snap-in
gptkb:net.exe
gptkb:sc.exe
gptkb:PowerShell
gptkb:Task_Manager
|
|
gptkbp:canBeStoppedBy
|
User with administrative privileges
|
|
gptkbp:canQuery
|
gptkb:WMI
gptkb:Get-Service_(PowerShell)
gptkb:Service_Controller_API
gptkb:tasklist.exe
|
|
gptkbp:canRunAs
|
gptkb:Network_Service_account
gptkb:Local_System_account
User account
Local Service account
|
|
gptkbp:containsSettlement
|
Automatic
Manual
Disabled
|
|
gptkbp:developedBy
|
gptkb:Microsoft
|
|
https://www.w3.org/2000/01/rdf-schema#label
|
Windows Services
|
|
gptkbp:introducedIn
|
gptkb:Windows_NT
|
|
gptkbp:mayInclude
|
Service description
Dependencies
Service status
Display name
Failure actions
Log on account
Recovery options
Service name
Service type
Startup parameters
|
|
gptkbp:monitors
|
gptkb:Event_Viewer
|
|
gptkbp:partOf
|
gptkb:Microsoft_Windows
|
|
gptkbp:programmingLanguage
|
gptkb:Delphi
gptkb:Python_(with_pywin32)
gptkb:C#
gptkb:C++
gptkb:.NET_Framework
gptkb:Win32_API
|
|
gptkbp:purpose
|
Background process management
|
|
gptkbp:runsOn
|
Session 0
|
|
gptkbp:vulnerableTo
|
Privilege escalation
DLL hijacking
Persistence techniques
Unquoted service paths
|
|
gptkbp:bfsParent
|
gptkb:Task_Scheduler
|
|
gptkbp:bfsLayer
|
6
|