Scheduled Task Executed From A Suspicious Location

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•0•0

Detects the execution of Scheduled Tasks where the Program being run is located in a suspicious location or it's an unusale program to be run from a Scheduled Task