The service object should be a info for a service that maybe is compromised or was attacked. Name: service Attributes: - Name - port - function - command-line maybe related to #331
