All Detections

HackTool - Default PowerSploit/Empire Scheduled Task Creation

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202508

Detects the creation of a schtask via PowerSploit or Empire Default Configuration.

Sigma