Suspicious Scheduled Task Persistence Attempt
Identifies creation of scheduled tasks using names observed in malware and cryptojacking campaigns attempting to establish persistence.
Microsoft Sentinel (KQL)

Identifies creation of scheduled tasks using names observed in malware and cryptojacking campaigns attempting to establish persistence.

Already have an account?