reg_hunter icon indicating copy to clipboard operation
reg_hunter copied to clipboard

Add ScheduledTask examination and collection

Open theflakes opened this issue 4 years ago • 0 comments

This may require using COM, at least it did with PowerShell.

Field names: timestamp device_domain device_name default_hash task_path name status enabled account_domain account_name next_run last_run last_result description run_as_domain run_as_account logon_mode hidden priority path command_line (path to binary to execute + arguments) start_in logon_trigger

theflakes avatar Dec 12 '20 13:12 theflakes