Remote Schedule Task Lateral Movement via ATSvc (0fcd1c79-4eeb-4746-aba9-1b458f7a79cb)

Detects remote RPC calls to create or execute a scheduled task via ATSvc

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Remote Schedule Task Lateral Movement via ATSvc (0fcd1c79-4eeb-4746-aba9-1b458f7a79cb)	Sigma-Rules	Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	1
Remote Schedule Task Lateral Movement via ATSvc (0fcd1c79-4eeb-4746-aba9-1b458f7a79cb)	Sigma-Rules	At - T1053.002 (f3d95a1f-bba2-44ce-9af7-37866cd63fd0)	Attack Pattern	1
Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	At - T1053.002 (f3d95a1f-bba2-44ce-9af7-37866cd63fd0)	Attack Pattern	2