How to find out what process issued a windows service start?

		Exetools > General > General Discussion
How to find out what process issued a windows service start?

04-11-2020, 06:00

Rasmus

Friend

Join Date: Jul 2019

Posts: 179

Rept. Given: 0

Rept. Rcvd 9 Times in 8 Posts

Thanks Given: 116

Thanks Rcvd at 106 Times in 64 Posts

Quote:

Originally Posted by DavidXanatos

Sounds tricky, could you please point me in the direction of a guide or how-to for that task.

Code:

https://docs.microsoft.com/en-us/windows/win32/rpc/how-rpc-works

A quick example though it is in java-

Code:

https://github.com/km-works/portal-rpc-server-hook

You'd need to do the same for services.exe

The Following User Says Thank You to Rasmus For This Useful Post:
chants (04-11-2020)

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Some advice on how to load a windows process dump into IDA Pro?	rcer	General Discussion	7	03-08-2025 00:09

All times are GMT +8. The time now is 15:18.