Build detection rules for suspicious Windows scheduled tasks by correlating Sysmon and Windows Security logs. Examine parent processes, file paths, encoded commands, and remote task creation to uncover persistent access and movement between systems.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating suspicious scheduled task creation
- Hunting for tasks that run encoded commands
- Detecting remote task creation across systems
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Detect malicious scheduled task creation and modification using Sysmon Event IDs 1 (Process Create for schtasks.exe), 11 (File Create for task XML), and Windows Security Event 4698/4702. The analyst correlates task creation with suspicious parent processes, public directory paths, and encoded command arguments to identify persistence and lateral movement via scheduled tasks. Activates for requests involving scheduled task detection, Sysmon persistence hunting, or T1053.005 Scheduled Task/Job analysis.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
andycungkrinx91/konoha☆ 92026년 10월 19일 업데이트
Detect malicious scheduled task creation and modification using Sysmon Event IDs 1 (Process Create for schtasks.exe), 11 (File Create for task XML), and Windows Security Event 4698/4702. The analyst correlates task creation with suspicious parent processes, public directory paths, and encoded command arguments to identify persistence and lateral movement via scheduled tasks. Activates for requests involving scheduled task detection, Sysmon persistence hunting, or T1053.005 Scheduled Task/Job analysis.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
micsapp/micstec-skills☆ 42026년 3월 20일 업데이트
Detect malicious scheduled task creation and modification using Sysmon Event IDs 1 (Process Create for schtasks.exe), 11 (File Create for task XML), and Windows Security Event 4698/4702. The analyst correlates task creation with suspicious parent processes, public directory paths, and encoded command arguments to identify persistence and lateral movement via scheduled tasks. Activates for requests involving scheduled task detection, Sysmon persistence hunting, or T1053.005 Scheduled Task/Job analysis.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aniket2348823/Vul-Agent☆ 22026년 6월 9일 업데이트
Set up one-time reminders and recurring tasks, then inspect, edit, delete, or run saved tasks on request. Supports specific execution dates, time zones, and cron-style schedules that define recurring times.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Setting a one-time reminder
- Scheduling a recurring weekday task
- Reviewing and changing saved task schedules
agent0ai/agent-zero☆ 2만2026년 10월 15일 업데이트
Set up a privacy legal plugin through an interview and existing documents. Capture applicable regulations, data processing agreement positions, and privacy impact assessment formats in shared settings, with options to resume setup or recheck integrations.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Setting up the privacy plugin for the first time
- Capturing team standards from existing privacy documents
- Resuming or revising an incomplete setup interview
anthropics/claude-for-legal☆ 9.7천2026년 10월 14일 업데이트
List all scheduled tasks with their ID, name, type, status, and next execution time. When you need to check existing tasks, find task ID for cancel/update, or verify task creation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
openakita/openakita☆ 2천2026년 9월 24일 업데이트
Manage Agentara scheduled tasks (cronjobs). Use when the user wants to create, list, update, or delete recurring scheduled tasks — triggered by phrases like "add a cronjob", "schedule a task", "remind me to do something after 10 minutes", "list my scheduled tasks", "remove cronjob", "update the schedule", etc.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
MagicCube/agentara☆ 5172026년 5월 11일 업데이트
Schedule recurring tasks and heartbeat monitoring using Claude Code's cron system (CronCreate/CronList/CronDelete). Implements the Agentic Heartbeat Pattern for ecosystem health monitoring.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
oimiragieo/agent-studio☆ 422026년 7월 14일 업데이트
Hunts for Windows persistence across autostart locations: Run keys, services, scheduled tasks, WMI event subscriptions, and startup folders, baselining them to surface anomalous or recently added entries. Activates for requests to hunt persistence, audit autostart extensibility points, or find malware autoruns on Windows.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
meltedinhex/analyst-ai-pack☆ 222026년 7월 7일 업데이트
ALWAYS use this skill when the user asks to schedule, automate, set up recurring tasks, create a cron job, or anything involving timed / periodic execution. Do NOT use the local system crontab — scheduled tasks are stored on the Unique AI Platform and executed by a Kubernetes CronJob, not locally. Scheduled tasks always run on the current assistant (`$UNIQUE_ASSISTANT_ID`); never ask the user which assistant to use, neither in chat nor via `unique-cli elicit ask`. This skill covers creating, listing, updating, enabling, disabling, and deleting scheduled tasks via the unique-cli schedule command.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Unique-AG/ai☆ 52026년 10월 19일 업데이트