Powershell Create Scheduled Task — Detection Rule

Adversaries may abuse the Windows Task Scheduler to perform task scheduling for initial or recurring execution of malicious code

Read the full analysis on IntelFusions