Scheduled Task Executed Uncommon LOLBIN

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•0•0

Detects the execution of Scheduled Tasks where the program being run is located in a suspicious location or where it is an unusual program to be run from a Scheduled Task