SharkLoader/Cobalt Strike Scheduled Task Persistence via SystemSettings.exe
Detects the creation of scheduled tasks or command-line execution of task scheduling utilities (schtasks.exe, at.exe) that reference known SharkLoader persistence paths, file names, or task naming conventions.
Splunk (SPL)
