.. /Schtasks.exe

Star

Schedule periodic tasks

• https://isc.sans.edu/forums/diary/Adding+Persistence+Via+Scheduled+Tasks/23633/

Execute

1. Create a recurring task to execute every minute.

   schtasks /create /sc minute /mo 1 /tn "Reverse shell" /tr c:\some\directory\revshell.exe

   Use case

   Create a recurring task to keep reverse shell session(s) alive

   Privileges required

   User

   Operating systems

   Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11

   ATT&CK® technique

   T1053.005

2. Create a scheduled task on a remote computer for persistence/lateral movement

   schtasks /create /s targetmachine /tn "MyTask" /tr c:\some\directory\notevil.exe /sc daily

   Use case

   Create a remote task to run daily relative to the the time of creation

   Privileges required

   Administrator

   Operating systems

   Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11

   ATT&CK® technique

   T1053.005