Services
Windows Services
BFE
Base Filtering Engine
BFE manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.
How To Execute:
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
EventSystem
COM+ Event System
Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.
How To Execute:
C:\Windows\system32\svchost.exe -k LocalService
CryptSvc
Cryptographic Services
Provides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
How To Execute:
C:\Windows\system32\svchost.exe -k NetworkService
[continued ...]
Windows Services
BFE
Base Filtering Engine
BFE manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.
How To Execute:
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
EventSystem
COM+ Event System
Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.
How To Execute:
C:\Windows\system32\svchost.exe -k LocalService
CryptSvc
Cryptographic Services
Provides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
How To Execute:
C:\Windows\system32\svchost.exe -k NetworkService
[continued ...]
No comments:
Post a Comment