Remote Schedule Task Lateral Movement via ITaskSchedulerService (ace3ff54-e7fd-46bd-8ea0-74b49a0aca1d)

Detects remote RPC calls to create or execute a scheduled task

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Remote Schedule Task Lateral Movement via ITaskSchedulerService (ace3ff54-e7fd-46bd-8ea0-74b49a0aca1d)	Sigma-Rules	At - T1053.002 (f3d95a1f-bba2-44ce-9af7-37866cd63fd0)	Attack Pattern	1
Remote Schedule Task Lateral Movement via ITaskSchedulerService (ace3ff54-e7fd-46bd-8ea0-74b49a0aca1d)	Sigma-Rules	Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	1
At - T1053.002 (f3d95a1f-bba2-44ce-9af7-37866cd63fd0)	Attack Pattern	Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	2