schtasks Disabling Windows Defender Maintenance Scheduled Tasks

Duo Tech@duotech

•updated Jul 9, 2026•1•0•3

Detects the use of the schtasks utility to modify and disable scheduled tasks related to Microsoft Windows Defender, specifically the scheduled scan, cache maintenance, and verification tasks. This behavior is indicative of an attempt to impair security defenses on a Windows host.