Aniruddha Ghosh

Results 4 issues of Aniruddha Ghosh

```yaml title: Scheduled task created and deleted fastly (ATexec.py) description: Detects scenarios where an attacker abuse task scheduler capacities to execute commands or elevate privileges. references: - https://github.com/mdecrevoisier/EVTX-to-MITRE-Attack/tree/master/TA0002-Execution/T1053.005-Scheduled%20Task - https://github.com/SecureAuthCorp/impacket/blob/master/examples/atexec.py...

TA0003-Persistence | T1098.xxx-Account manipulation | Custom sensitive account password reset | 4723 or 4724 | Please help me to find the rule. I am not able to find it.