Scheduled Job - DS0003 (c9ddfb51-eb45-4e22-b614-44ac1caa7883)

Automated tasks that can be executed at a specific time or on a recurring schedule running in the background (ex: Cron daemon, task scheduler, BITS)(Citation: Microsoft Tasks)

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Scheduled Job Metadata (7b375092-3a61-448d-900a-77c9a4bde4dc)	mitre-data-component	Scheduled Job - DS0003 (c9ddfb51-eb45-4e22-b614-44ac1caa7883)	mitre-data-source	1
Scheduled Job - DS0003 (c9ddfb51-eb45-4e22-b614-44ac1caa7883)	mitre-data-source	Scheduled Job Creation (f42df6f0-6395-4f0c-9376-525a031f00c3)	mitre-data-component	1
Scheduled Job - DS0003 (c9ddfb51-eb45-4e22-b614-44ac1caa7883)	mitre-data-source	Scheduled Job Modification (faa34cf6-cf32-4dc9-bd6a-8f7a606ff65b)	mitre-data-component	1
Scheduled Job Metadata (7b375092-3a61-448d-900a-77c9a4bde4dc)	mitre-data-component	Masquerade Task or Service - T1036.004 (7bdca9d5-d500-4d7d-8c52-5fd47baf4c0c)	Attack Pattern	2
Scheduled Job Metadata (7b375092-3a61-448d-900a-77c9a4bde4dc)	mitre-data-component	Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0)	Attack Pattern	2
Systemd Timers - T1053.006 (a542bac9-7bc1-4da7-9a09-96f69e23cc21)	Attack Pattern	Scheduled Job Creation (f42df6f0-6395-4f0c-9376-525a031f00c3)	mitre-data-component	2
At - T1053.002 (f3d95a1f-bba2-44ce-9af7-37866cd63fd0)	Attack Pattern	Scheduled Job Creation (f42df6f0-6395-4f0c-9376-525a031f00c3)	mitre-data-component	2
Container Orchestration Job - T1053.007 (1126cab1-c700-412f-a510-61f4937bb096)	Attack Pattern	Scheduled Job Creation (f42df6f0-6395-4f0c-9376-525a031f00c3)	mitre-data-component	2
Scheduled Job Creation (f42df6f0-6395-4f0c-9376-525a031f00c3)	mitre-data-component	Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9)	Attack Pattern	2
Scheduled Job Creation (f42df6f0-6395-4f0c-9376-525a031f00c3)	mitre-data-component	Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	2
Scheduled Job Creation (f42df6f0-6395-4f0c-9376-525a031f00c3)	mitre-data-component	Cron - T1053.003 (2acf44aa-542f-4366-b4eb-55ef5747759c)	Attack Pattern	2
Indicator Removal - T1070 (799ace7f-e227-4411-baa0-8868704f2a69)	Attack Pattern	Scheduled Job Modification (faa34cf6-cf32-4dc9-bd6a-8f7a606ff65b)	mitre-data-component	2
Masquerade Task or Service - T1036.004 (7bdca9d5-d500-4d7d-8c52-5fd47baf4c0c)	Attack Pattern	Scheduled Job Modification (faa34cf6-cf32-4dc9-bd6a-8f7a606ff65b)	mitre-data-component	2
Clear Persistence - T1070.009 (d2c4e5ea-dbdf-4113-805a-b1e2a337fb33)	Attack Pattern	Scheduled Job Modification (faa34cf6-cf32-4dc9-bd6a-8f7a606ff65b)	mitre-data-component	2
Scheduled Job Modification (faa34cf6-cf32-4dc9-bd6a-8f7a606ff65b)	mitre-data-component	Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0)	Attack Pattern	2
Masquerade Task or Service - T1036.004 (7bdca9d5-d500-4d7d-8c52-5fd47baf4c0c)	Attack Pattern	Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0)	Attack Pattern	3
Systemd Timers - T1053.006 (a542bac9-7bc1-4da7-9a09-96f69e23cc21)	Attack Pattern	Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	3
At - T1053.002 (f3d95a1f-bba2-44ce-9af7-37866cd63fd0)	Attack Pattern	Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	3
Container Orchestration Job - T1053.007 (1126cab1-c700-412f-a510-61f4937bb096)	Attack Pattern	Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	3
Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9)	Attack Pattern	Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	3
Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	Cron - T1053.003 (2acf44aa-542f-4366-b4eb-55ef5747759c)	Attack Pattern	3
Indicator Removal - T1070 (799ace7f-e227-4411-baa0-8868704f2a69)	Attack Pattern	Clear Persistence - T1070.009 (d2c4e5ea-dbdf-4113-805a-b1e2a337fb33)	Attack Pattern	3