Jan 05 2022 02:54 PM
I have a service that I'd like to create an alert for if it is stopped, but I can't find any related events to the service stopping in MDE, and as far as I can tell, service status isn't recorded in the registry.
Mar 03 2022 10:52 AM
Mar 03 2022 11:04 AM
I ended up talking to MS about this, and the answer is you can't. They said MDE only monitors processes related to Windows.
Mar 03 2022 11:11 AM