D3-SJA: Scheduled Job Analysis

MITRE D3FEND countermeasure

What it does

Analysis of source files, processes, destination files, or destination servers associated with a scheduled job to detect unauthorized use of job scheduling.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

• T1036
• T1036.004
• T1053
• T1053.002
• T1053.003
• T1053.005
• T1053.006
• T1053.007

Source

• MITRE D3FEND D3-SJA