Persistence via Scheduled Tasks with Privilege Escalation

Detects the creation of scheduled tasks with privilege elevation flags, a technique documented in LotL attacks where adversaries combine schtasks with token manipulation to maintain persistence with elevated privileges