Scheduled Task Creation with Encoded or Scripted Execution

Detects potentially malicious scheduled tasks that establish persistence using trusted Windows binaries, encoded PowerShell commands, or masqueraded task names commonly observed in malware and post-compromise activity.