Suspicious Scheduled Task Creation — Detection Rule

Detects suspicious scheduled task creation events. Based on attributes such as paths, commands line flags, etc.

Read the full analysis on IntelFusions