Remote Schedule Task Lateral Movement via SASec

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•0•1

Detects remote RPC calls to create or execute a scheduled task via SASec