Home > CAPEC List > CAPEC-557: Schedule Software To Run (Version 2.11)  

CAPEC-557: Schedule Software To Run

Schedule Software To Run
Definition in a New Window Definition in a New Window
Attack Pattern ID: 557
Abstraction: Detailed
Status: Draft
Completeness: Stub
Presentation Filter:
+ Summary

It is possible to schedule software to be run at a time in the future (Windows commands "at" and "schtasks", along with the Windows Task Scheduler, cron in UNIX-based systems). Task scheduling may be used to execute programs on a scheduled basis to for various malicious purposes.

+ Solutions and Mitigations

Disable the execution scheduler commands. Limit the privileges of user accounts so scheduled task creation and modification can only be performed by authorized administrators.

+ References
[R.557.1] ATT&CK Project. "Scheduled Task (1053)". MITRE. <https://attack.mitre.org/wiki/Scheduled_task>.
+ Content History
CAPEC Content TeamThe MITRE Corporation2015-11-09Internal_CAPEC_Team

More information is available — Please select a different filter.
Page Last Updated or Reviewed: August 04, 2017