Schtasks Creation Or Modification With SYSTEM Privileges — Detection Rule

Detects the creation or update of a scheduled task to run with "NT AUTHORITY\SYSTEM" privileges