Schtasks Creation Or Modification With SYSTEM Privileges (89ca78fd-b37c-4310-b3d3-81a023f83936)

Detects the creation or update of a scheduled task to run with "NT AUTHORITY\SYSTEM" privileges

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9)	Attack Pattern	Schtasks Creation Or Modification With SYSTEM Privileges (89ca78fd-b37c-4310-b3d3-81a023f83936)	Sigma-Rules	1
Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9)	Attack Pattern	Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	2