Detection rules › By eventService-Control-Manager event 70403 detection rules reference this event. View event page.Splunk (3)Windows Event For Service Disabled T1562.001 Windows Excessive Disabled Services Event T1562.001 Windows Service Stop Win Updates T1489