Suspicious Command Patterns In Scheduled Task Creation — Detection Rule
Detects scheduled task creation using "schtasks" that contain potentially suspicious or uncommon commands
Detects scheduled task creation using "schtasks" that contain potentially suspicious or uncommon commands