ChainScript cleanup: scheduled task/Run key removal plus scattered dir deletion

Ibrahim Saud@tektrix

•updated 14 days ago•0•0•3

Detects the removal of persistence mechanisms related to the 'ComponentTask33Agent' task, specifically the deletion of a scheduled task or registry Run key, followed by the deletion of associated files within specific Microsoft-themed AppData subdirectories within a 30-minute window.