ThugLyfe Threat Hunt Notes
net accounts
Suspicious Accounts:
- Administators
- SYSTEM_SERVICE
Get-ScheduledTask
Investigate Scheduled Tasks with no task path
{{ message }}
net accounts
Suspicious Accounts:
Get-ScheduledTask
Investigate Scheduled Tasks with no task path