All Detections

scheduled task creation

Azure Sentinel@AzureSentinel
updated Jun 17, 20252044

Original Sigma Rule: https://github.com/Neo23x0/sigma/blob/master/rules/windows/process_creation/win_susp_schtask_creation.yml. Questions via Twitter: @janvonkirchheim.

Microsoft Sentinel (KQL)