Suspicious Command Patterns In Scheduled Task Creation

SigmaHQ Detections@sigmaHQ

•updated Mar 19, 2024•0•0•0

Detects scheduled task creation using "schtasks" that contain potentially suspicious or uncommon commands