Disable Important Scheduled Task (9ac94dc8-9042-493c-ba45-3b5e7c86b980)
Detects when adversaries stop services or processes by disabling their respective scheduled tasks in order to conduct data destructive activities
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
Disable Important Scheduled Task (9ac94dc8-9042-493c-ba45-3b5e7c86b980) | Sigma-Rules | Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b) | Attack Pattern | 1 |