(EventID:4674 ObjectType:SC_MANAGER\ OBJECT ObjectName:servicesactive PrivilegeList:SeTakeOwnershipPrivilege) (-(SubjectLogonId:0x3e4 ProcessName:\:\\Windows\\System32\\services.exe))