OysterLoader Scheduled Task Persistence
Detects the creation of a scheduled task characteristic of OysterLoader persistence. The malware creates a task to execute its dropped DLL in the AppData\Roaming directory using rundll32.exe and the DllRegisterServer export.
Sigma
