Suspicious Scheduled Task Creation via Masqueraded XML File

심각도 보통 Sigma 탐지 룰. Detects the creation of a scheduled task using the "-XML" flag with a file without the '.xml' extension. This behavior could be indicative o…

작성자: Swachchhanda Shrawan Poudel, Elastic (idea) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본