{
  "technique_id": "T1053",
  "name": "Scheduled Task/Job",
  "tactics": [
    "Execution",
    "Persistence",
    "Privilege Escalation"
  ],
  "platforms": [
    "Containers",
    "ESXi",
    "Linux",
    "macOS",
    "Network Devices",
    "Windows"
  ],
  "summary": "Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments)...",
  "generated_by": "SOC Response Atlas by Basyrix"
}