Delete All Scheduled Tasks (220457c1-1c9f-4c2e-afe6-9598926222c1)
Detects the usage of schtasks with the delete flag and the asterisk symbol to delete all tasks from the schedule of the local computer, including tasks scheduled by other users.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b) | Attack Pattern | Delete All Scheduled Tasks (220457c1-1c9f-4c2e-afe6-9598926222c1) | Sigma-Rules | 1 |