Renamed Schtasks Execution

Last updated on:

In this page

About the rule

Rule Type

Standard

Rule Description

Detects the execution of renamed schtasks.exe binary, which is a legitimate Windows utility used for scheduling tasks.

Severity

Attention

Detection

Execution Mode

realtime

Log Sources

Windows

Author

@Swachchhanda Shrawan Poudel (Nextron Systems)