services

$ target-query <path/to/target> -f services

Details

Module	os.unix.linux.services.ServicesPlugin
Output	records

Module documentation

No documentation

Function documentation

Return information about all installed systemd and init.d services.

References: - https://geeksforgeeks.org/what-is-init-d-in-linux-service-management - http://0pointer.de/blog/projects/systemd-for-admins-3.html - https://www.freedesktop.org/software/systemd/man/systemd.syntax.html

Details

Module	os.windows.services.ServicesPlugin
Output	records

Module documentation

Services plugin.

Function documentation

Return information about all installed services.

The HKLMSYSTEMCurrentControlSetServices registry key contains information about the installed services and drivers on the system.

References:

• https://artifacts-kb.readthedocs.io/en/latest/sources/windows/ServicesAndDrivers.html

Yields ServiceRecords with fields:

hostname (string): The target hostname. domain (string): The target domain. ts (datatime): The last modified timestamp of the registry key. name (string): The service name. displayname (string): The service display name. servicedll (path): The service dll. imagepath (path): The service image path. objectname (string): The object under which the service runs (for example LocalSystem) start (string): The service start field. type (string): The service type field. errorcontrol (string): The service error control field.