CCFH-202B: CrowdStrike Certified Falcon Hunter

Question

An attacker creates a scheduled task that runs a remote management application.

Which stage of the MITRE ATT&CK Matrix for Enterprise does this illustrate?

Explanation

Scheduled tasks can execute a program at startup or on a recurring schedule, enabling an adversary to maintain access over time. MITRE ATT&CK maps Scheduled Task/Job to the Persistence tactic.

Learn more

MITRE ATT&CK: Scheduled Task/Job (T1053)

CCFH-202B: CrowdStrike Certified Falcon Hunter

AstroTutor

Notes

Readiness

QuestionQ14

Community Discussion