Suspicious Scheduled Task Update — Detection Rule

Detects update to a scheduled task event that contain suspicious keywords.

Read the full analysis on IntelFusions