Skip to content

Hide Navigation Hide TOC

Important Scheduled Task Deleted/Disabled (7595ba94-cf3b-4471-aa03-4f6baa9e5fad)

Detects when adversaries stop services or processes by deleting or disabling their respective scheduled tasks in order to conduct data destructive activities

Cluster A Galaxy A Cluster B Galaxy B Level
Important Scheduled Task Deleted/Disabled (7595ba94-cf3b-4471-aa03-4f6baa9e5fad) Sigma-Rules Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9) Attack Pattern 1
Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9) Attack Pattern Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9) Attack Pattern 2