Detecting Persistent Scheduled Tasks
Discover how threat actors abuse Scheduled Tasks for persistence and how to detect this abuse.
Task 1: Introduction
Task 2: Scheduled Task from a Legitimate Perspective
Task 3: Scheduled Task from an Adversary Perspective
Task 4: Detecting Scheduled Tasks with Event Logs
Task 5: Detecting Scheduled Tasks with DFIR Artifacts
Task 6: Containment, Prevention and Mitigation
Task 7: Hands-On Investigation
Task 8: Conclusion