Scheduled Task Creation Masquerading as System Processes — Detection Rule
Detects the creation of scheduled tasks that involve system processes, which may indicate malicious actors masquerading as or abusing these processes to execute payloads or maintain persistence.