Suspicious Scheduled Task Creation Involving Temp Folder — Detection Rule

Detects the creation of scheduled tasks that involves a temporary folder and runs only once