Schtasks Creation Or Modification With SYSTEM Privileges

SigmaHQ Detections@sigmaHQ

•updated Feb 15, 2025•0•0•0

Detects the creation or update of a scheduled task to run with "NT AUTHORITY\SYSTEM" privileges