Persistence and Execution at Scale via GPO Scheduled Task — Detection Rule

Detect lateral movement using GPO scheduled task, usually used to deploy ransomware at scale