win:taskscheduler
Task Scheduler operational log
Channel: Microsoft-Windows-TaskScheduler/Operational
- Host type
- Windows (workstation, member server, domain controller)
- Techniques
- 3
- Rules listed
- 5
- Events
- 7
Techniques
Rules
Sigma 4
- Important Scheduled Task Deleted or Disabled by frack113
- Scheduled Task Executed From A Suspicious Location by Nasreddine Bencherchali (Nextron Systems)
- Scheduled Task Executed Uncommon LOLBIN by Nasreddine Bencherchali (Nextron Systems)
- Scheduled Tasks Names Used By SVR For GraphicalProton Backdoor - Task Scheduler by CISA