Remote Service Execution via SCM

Use the Windows Service Control Manager to start an existing or temporary service that runs a command or binary. PsExec and Impacket smbexec can use temporary services for remote execution. The two steps below are alternative implementations; choose one, not both. Remote use requires valid credentials and sufficient rights to manage services on the target; SMB shares and service-control RPC over SMB must be reachable. It can be initiated from outside an internal network when that required path is exposed to the Internet; this condition does not imply that Windows targets are exposed by default. ATT&CK classifies the behavior as Execution; remote use may support lateral movement.