Remote Scheduled Task Reconnaissance via AtScv RPC

SigmaHQ Detections@sigmaHQ

•updated Jun 4, 2025•0•20

Detects remote RPC calls to read information about scheduled tasks via AtScv. This activity can indicate an adversary performing reconnaissance to understand the environment and identify potential lateral movement opportunities.