Finding Why a Linux Service Stopped After an Update

This post first appeared on the ET Ducky blog. I build ET Ducky, an RMM that reads ETW on Windows and eBPF on Linux. A service on an Ubuntu or Debian server shows as inactive the morning after a round