Suspicious Tasklist Discovery Command — Detection Rule
Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network