Suspicious Schtasks Schedule Type With High Privileges — Detection Rule

Detects scheduled task creations or modification to be run with high privileges on a suspicious schedule type

Read the full analysis on IntelFusions