Malicious activity

Administrator Created Scheduled Task On System

Platform(s)
  • N/A

Compliance Frameworks

Description

This alert indicates that a new scheduled task has been created on a Windows system with administrative privileges. Scheduled tasks are a feature of Windows that allow users to schedule automated tasks or scripts to run at specified intervals or in response to certain triggers.
  • Recommended Mitigation

    Investigate the new scheduled task, and remove or disable any unauthorized tasks.