Important Scheduled Task Deleted or Disabled — Detection Rule

Detects when adversaries try to stop system services or processes by deleting or disabling their respective scheduled tasks in order to conduct data destructive activities

Read the full analysis on IntelFusions