Skip to content

Hide Navigation Hide TOC

Scheduled Task Executed Uncommon LOLBIN (f0767f15-0fb3-44b9-851e-e8d9a6d0005d)

Detects the execution of Scheduled Tasks where the program being run is located in a suspicious location or where it is an unusual program to be run from a Scheduled Task

Cluster A Galaxy A Cluster B Galaxy B Level
Scheduled Task Executed Uncommon LOLBIN (f0767f15-0fb3-44b9-851e-e8d9a6d0005d) Sigma-Rules Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9) Attack Pattern 1
Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9) Attack Pattern Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9) Attack Pattern 2