Detects the creation of a schtask via PowerSploit or Empire Default Configuration.
Read the full analysis on IntelFusions