Scheduled Task Creation Via Schtasks.EXE (92626ddd-662c-49e3-ac59-f6535f12d189)

Detects the creation of scheduled tasks by user accounts via the "schtasks" utility.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Scheduled Task Creation Via Schtasks.EXE (92626ddd-662c-49e3-ac59-f6535f12d189)	Sigma-Rules	Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9)	Attack Pattern	1
Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9)	Attack Pattern	2