Service installation alerts

Occasional Visitor

Hi all,

Can Defender for endpoint create an alert when a new service is installed?

1 Reply
Yes. The DeviceEvents table includes the ServiceInstalled action type