Suspicious Scheduled Task Write to System32 Tasks (80e1f67a-4596-4351-98f5-a9c3efabac95)
Detects the creation of tasks from processes executed from suspicious locations
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9) | Attack Pattern | Suspicious Scheduled Task Write to System32 Tasks (80e1f67a-4596-4351-98f5-a9c3efabac95) | Sigma-Rules | 1 |