Suspicious Schtasks Schedule for Task Enumeration

Rule Info

Name
Suspicious Schtasks Schedule for Task Enumeration
Author
MalGamy
Description
Detects the use of schtasks.exe to query scheduled tasks with detailed and verbose output.
Date
2024-12-20 00:00:00
Modified
None
Id
b7b19e8c-111e-4df6-b7f1-ea2cf4505a2e
Tags
attack.execution attack.t1053.005
Type
Nextron Sigma feed only (private)

Rule History