ESET Inspect On-Prem – Table of Contents

Service

Copy current article URL Share via email

This article (PDF) Whole documentation (PDF)

Service component allows you to create rules based on properties of Windows services and service-control events exposed by the Service Control Manager (SCM).

Property	Type	Description	Example
LoadType	Symbol	The service start type	Possible values are: •0—BootLoad •1—SystemLoad •2—AutoLoad •3—ManualLoad •4—DisabledLoad
Name	String	The internal service name registered with the SCM
Type	Int	Indicates the type of service that was registered with the SCM	Possible values are: •1—DriverType •2—FileSystemType •4—AdapterType •8—RecognizerType •16—Win32ServiceOwnProcess •32—Win32ServiceShareProcess •272—InteractiveOwnProcess •288—InteractiveShareProcess

Property

Type

Description

Example

LoadType

Symbol

The service start type

Possible values are:

•0—BootLoad

•1—SystemLoad

•2—AutoLoad

•3—ManualLoad

•4—DisabledLoad

Name

String

The internal service name registered with the SCM

Type

Int

Indicates the type of service that was registered with the SCM

Possible values are:

•1—DriverType

•2—FileSystemType

•4—AdapterType

•8—RecognizerType

•16—Win32ServiceOwnProcess

•32—Win32ServiceShareProcess

•272—InteractiveOwnProcess

•288—InteractiveShareProcess

Supported operations

•ServiceInstalled

•ServiceStarted

˄˅