Important Scheduled Task Deleted or Disabled

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•1

Detects when adversaries try to stop system services or processes by deleting or disabling their respective scheduled tasks in order to conduct data destructive activities