Remote schedule task creation via named pipes (ATexec)
Detects scenarios where an attacker remotely creates a scheduled task over named pipes to execute commands or elevate privileges.
Sigma

Detects scenarios where an attacker remotely creates a scheduled task over named pipes to execute commands or elevate privileges.

Already have an account?