Important Scheduled Task Deleted (9e3cb244-bdb8-4632-8c90-6079c8f4f16d)
Detects when adversaries try to stop system services or processes by deleting their respective scheduled tasks in order to conduct data destructive activities
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
Important Scheduled Task Deleted (9e3cb244-bdb8-4632-8c90-6079c8f4f16d) | Sigma-Rules | Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b) | Attack Pattern | 1 |