LAB 648 – Response: Detecting a Malicious Windows Scheduled Task (NEW)

Course Overview

Malware can hide in Windows Scheduled Tasks to maintain persistence, making detection difficult among legitimate system tasks. Aligned with MITRE ATT&CK T1053.005 this lab guides learners through detecting, investigating, and removing malicious scheduled tasks on Windows systems without impacting legitimate operations.

By the end of this skill lab, learners will be able to:

• Identify malicious Windows Scheduled Tasks
• Investigate persistence techniques used by attackers
• Remove unauthorized tasks while preserving system stability