All Detections

Persistence and Execution at Scale via GPO Scheduled Task

avatar
SigmaHQ Detections@sigmaHQ
updated Oct 23, 2025000

Detect lateral movement using GPO scheduled task, usually used to deploy ransomware at scale

Sigma