tasks#

$ target-query <path/to/target> -f tasks
Details#

Module

os.windows.tasks.TasksPlugin

Output

records

Module documentation

Plugin for retrieving scheduled tasks on a Windows system.

Args:

target: The target system.

Function documentation

Return all scheduled tasks on a Windows system.

On a Windows system, a scheduled task is a program or script that is executed on a specific time or at specific intervals. An adversary may leverage such scheduled tasks to gain persistence on a system.

References:

https://en.wikipedia.org/wiki/Windows_Task_Scheduler

Yields:

The scheduled tasks found on the target.