enterprise-windows-infrastructure-security

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill contains numerous explicit administrative/privileged commands (e.g., creating AD users/OUs, installing Windows features/roles, modifying HKLM registry keys, joining machines to a domain, installing services and scheduled tasks) that change system configuration and require elevated privileges, so it clearly pushes an agent to modify the host state.