Delete All Scheduled Tasks (220457c1-1c9f-4c2e-afe6-9598926222c1)
Detects the usage of schtasks with the delete flag and the asterisk symbol to delete all tasks from the schedule of the local computer, including tasks scheduled by other users.
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
Delete All Scheduled Tasks (220457c1-1c9f-4c2e-afe6-9598926222c1) | Sigma-Rules | Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b) | Attack Pattern | 1 |