Hide Navigation Hide TOC Remote Schedule Task Lateral Movement via SASec (aff229ab-f8cd-447b-b215-084d11e79eb0) Detects remote RPC calls to create or execute a scheduled task via SASec Cluster A Galaxy A Cluster B Galaxy B Level Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9) Attack Pattern Remote Schedule Task Lateral Movement via SASec (aff229ab-f8cd-447b-b215-084d11e79eb0) Sigma-Rules 1 Remote Schedule Task Lateral Movement via SASec (aff229ab-f8cd-447b-b215-084d11e79eb0) Sigma-Rules At - T1053.002 (f3d95a1f-bba2-44ce-9af7-37866cd63fd0) Attack Pattern 1 Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9) Attack Pattern At - T1053.002 (f3d95a1f-bba2-44ce-9af7-37866cd63fd0) Attack Pattern 2