Attacks and malware

What is Scheduled task?

A job the operating system runs on a timer or at logon. A common and quiet way to establish persistence.

A scheduled task is a job that the operating system runs automatically on a schedule, at logon or at startup. On Windows these are managed by Task Scheduler. On Linux the equivalent is cron.

Attackers use scheduled tasks for persistence and for running commands across many machines. Tasks with random names, tasks that run scripts from temporary folders and tasks created remotely are classic findings.

Where you learn it

See Scheduled task in a real investigation

Our missions put you in front of real logs, domains and forums, with these terms underlined where they appear.

Start learning free