Malicious Realtek Audio Scheduled Task Creation
Identifies the creation of scheduled tasks masquerading as Realtek audio services for persistence, often associated with AsyncRAT.
Microsoft Sentinel (KQL)

Identifies the creation of scheduled tasks masquerading as Realtek audio services for persistence, often associated with AsyncRAT.

Already have an account?