Important Scheduled Task Deleted/Disabled — Detection Rule

Detects when adversaries stop services or processes by deleting or disabling their respective scheduled tasks in order to conduct data destructive activities

Read the full analysis on IntelFusions