The present disclosure provides a service state detection method and device and
electronic equipment, and relates to the technical field of
network security, wherein the method is applied to a low-privilege environment with a privilege lower than that of an administrator, and comprises: loading a configuration file, the configuration file containing a target service name and a target host address; according to the configuration file, calling a local security mechanism of the target host based on a
remote procedure call interface, remotely querying a service account, detecting a service installation state, the target host being a detected object and having a local security account service interface and a
named pipe communication capability; if it is detected that the service has been installed, accessing a
named pipe associated with the service according to a
server message block protocol based on a pre-set mapping relationship between the service name and the
named pipe, and detecting a service running state; and combining the service installation state and the service running state, outputting a service state detection result. The present disclosure can perform concealed detection on the service state of a remote target host in a low-privilege environment.