scheduled_task-create
April 24, 2024 · View on GitHub
Description
A scheduled task was created
Parameters
| Parameter | Value |
|---|---|
| Subject | scheduled_task |
| Activity | create |
| Activity Type | scheduled_task-create |
| Pretty Name | Scheduled_task Create |
Legacy Names
| Success | Fail |
|---|---|
| task-created | task-created |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
scheduled_task-create:success
| Field | Core | Detection | Informational |
|---|---|---|---|
| process_name | ✓ | ||
| local_user_name | |||
| process_path | ✓ | ||
| user | ✓ | ||
| cid | ✓ |
scheduled_task-create:fail
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| process_name | ✓ | ||
| local_user_name | |||
| failure_reason | ✓ | ||
| process_path | ✓ | ||
| user | ✓ | ||
| cid | ✓ |