CountLoader dual scheduled task persistence via GoogleUpdateService/MSEdgeUpdateService
Detects the creation of scheduled tasks using specific naming patterns (GoogleUpdateService or MSEdgeUpdateService followed by a GUID) often associated with the CountLoader malware. This technique attempts to masquerade as legitimate Google or Microsoft Edge update processes to establish persistence.
Microsoft Sentinel (KQL)
