Windows 11 & Server 2022 Services Deep Dive: Part 1 - A Technical Journey

Windows Services are critical software carefully designed to provide the functionality to applications, network services, and the operating system. Windows Services are *.dll files often executed in a “service host” process called svchost.exe Windows services are vectors of attack by malicious actors attempting to gain privilege elevation on the operating system. We will look at how services are authenticated; privileges are restricted and run in a unique session environment. A review of the tools to interact with services, including GUI, command-line, and PowerShell. We will focus on security in part 1 and part 2 on practical concepts and troubleshooting.