Scheduled persistent task with SYSTEM privileges creation

Detects scenarios where an attacker creates a privileged task to establish persistence.