Real-world descriptions of how a group, tool or campaign used a technique.
54 examples
| Technique | Used by | Procedure example |
|---|---|---|
| T1053.005 Scheduled Task |
GroupAPT33 | APT33 has created a scheduled task to execute a .vbe file multiple times a day. |
| T1053.005 Scheduled Task |
GroupFIN10 | FIN10 has established persistence by using S4U tasks as well as the Scheduled Task option in PowerShell Empire. |
| T1053.005 Scheduled Task |
GroupFIN8 | FIN8 has used scheduled tasks to maintain RDP backdoors. |
| T1053.005 Scheduled Task |
GroupFIN13 | FIN13 has created scheduled tasks in the `C:\Windows` directory of the compromised network. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
