admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update winevent_scheduled_task_created_within_public_path.yml

Browse Source
This commit is contained in:
mhaag-spl
2021-04-14 21:23:30 -06:00
parent 537be8ede4
commit f18542b214
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/winevent_scheduled_task_created_within_public_path.yml
+1 -1
View File
@@ -28,7 +28,7 @@ references:
- https://research.checkpoint.com/2021/irans-apt34-returns-with-an-updated-arsenal/
- https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID=4698
- https://redcanary.com/threat-detection-report/techniques/scheduled-task-job/
- https://docs.microsoft.com/en-us/windows/win32/taskschd/time-trigger-example--scripting-?redirectedfrom=MSDN
- https://docs.microsoft.com/en-us/windows/win32/taskschd/time-trigger-example--scripting
analytic_story:
- Windows Persistence Techniques
- Ransomware