anyone trying to trigger an alert when a service is stopped by the user? The below removes false positives when the system is shutdown/rebooted, but any enhancements are welcome.
one of the issues i found is that the username is 'unable to resolve'.
↧