
Rule Info
Name
Scheduled Task Pcalua Execution
Author
X__Junior
Description
Detects the execution of Scheduled Tasks where pcalua is being run which is unusual program to be run from a Scheduled Task
Date
2025-01-08 00:00:00
Modified
None
Id
9476b609-1f0d-44a3-a2c4-6f96f9dcf770
Tags
attack.persistence attack.t1053.005
Type
Nextron Sigma feed only (private)