Skip Navigation
Request Demo
 
 
 
 
 
 
 
 
 
 

Technique T1053

Scheduled Task/Job

Threats leveraging Scheduled Task/Job remain highly prevalent across our customer base, despite the technique dropping from fourth to seventh in 2022. The decrease in detection volume is due almost entirely to a corresponding decrease in Blue Mockingbird activity.

#7

Technique rank

14.7%

Organizations affected

1216

Confirmed threats
T1053.005
Scheduled Task
Scheduled Task
Arrow Icon

#4

Sub-technique rank

12.2%

organizations affected

1,147

confirmed threats

Leveraging the primary task-scheduling component of Windows, this technique allows adversarial persistence and execution behaviors to blend in with routine activity emanating from native tools and third-party software.

SEE MORE
 
Back to Top