Schtasks Creation Or Modification With SYSTEM Privileges
심각도 높음 Sigma 탐지 룰. Detects the creation or update of a scheduled task to run with "NT AUTHORITY\SYSTEM" privileges
작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본