Forum Discussion

winstuff's avatar
winstuff
Copper Contributor
Jun 06, 2022

Service installation alerts

Hi all,

Can Defender for endpoint create an alert when a new service is installed?

1 Reply

  • jbmartin6's avatar
    jbmartin6
    Iron Contributor
    Jun 07, 2022
    Yes. The DeviceEvents table includes the ServiceInstalled action type