Potential KamiKakaBot Activity - Shutdown Schedule Task Creation
Detects the creation of a scheduled task that runs weekly and executes the "shutdown /l /f" command. This behavior has been observed being used by KamiKakaBot samples to achieve persistence on a system.
Sigma
