Attempted Credential Dump From Registry via Reg exe
OS Credential Dumping, Security Account Manager
OS Credential Dumping, Security Account Manager
Service Stop
Service Stop, Create or Modify System Process, Windows Service
Remote Services, Distributed Component Object Model, MMC
Create or Modify System Process, Windows Service