Tools
Tools: How I Removed A Rogue "u######" Service Hiding In Dcomlaunch
A friend's laptop became noticeably slow and she asked me to take a look. What I found was a specific persistence pattern: a randomly named Windows service. I turned the manual steps into a single workflow script that detects this pattern.
Source: HackerNoon
