{
	"id": "ca3934e4-6db7-4f2c-9fa0-a6e925504573",
	"created_at": "2026-04-06T00:13:36.312721Z",
	"updated_at": "2026-04-10T03:22:06.788372Z",
	"deleted_at": null,
	"sha1_hash": "7f43af9251c69f33bda36b6c4f8bf926abc15e8c",
	"title": "sigma/rules/windows/registry/registry_delete/registry_delete_schtasks_hide_task_via_sd_value_removal.yml at master · SigmaHQ/sigma",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 54198,
	"plain_text": "sigma/rules/windows/registry/registry_delete/registry_delete_schtasks_hide_task_via_sd_v\r\nat master · SigmaHQ/sigma\r\nBy swachchhanda000\r\nArchived: 2026-04-05 14:07:26 UTC\r\nSkip to content\r\nNavigation Menu\r\nAI CODE CREATION\r\nGitHub CopilotWrite better code with AI\r\nGitHub SparkBuild and deploy intelligent apps\r\nGitHub ModelsManage and compare prompts\r\nMCP RegistryNewIntegrate external tools\r\nView all features\r\nPricing\r\nSign up\r\nSponsor\r\nNotifications\r\nFork 2.6k\r\nStar 10.3k\r\nCode\r\nIssues 9\r\nPull requests 105\r\nDiscussions\r\nActions\r\nProjects\r\nWiki\r\nSecurity and quality\r\nInsights\r\nFiles\r\nhttps://github.com/SigmaHQ/sigma/blob/master/rules/windows/registry/registry_delete/registry_delete_schtasks_hide_task_via_sd_value_removal.yml\r\nPage 1 of 2\n\nregistry_delete_defender_context_menu.yml\r\nregistry_delete_disable_credential_guard.yml\r\nregistry_delete_enable_windows_recall.yml\r\nregistry_delete_exploit_guard_protected_folders.yml\r\nregistry_delete_mstsc_history_cleared.yml\r\nregistry_delete_removal_amsi_registry_key.yml\r\nregistry_delete_removal_com_hijacking_registry_key.yml\r\nregistry_delete_runmru.yml\r\nregistry_delete_schtasks_hide_task_via_index_value_removal.yml\r\nregistry_delete_schtasks_hide_task_via_sd_value_removal.yml\r\nLatest commit\r\nFile metadata and controls\r\nWhile the code is focused, press Alt+F1 for a menu of operations.\r\nSource: https://github.com/SigmaHQ/sigma/blob/master/rules/windows/registry/registry_delete/registry_delete_schtasks_hide_task_via_sd_value_removal.\r\nyml\r\nhttps://github.com/SigmaHQ/sigma/blob/master/rules/windows/registry/registry_delete/registry_delete_schtasks_hide_task_via_sd_value_removal.yml\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://github.com/SigmaHQ/sigma/blob/master/rules/windows/registry/registry_delete/registry_delete_schtasks_hide_task_via_sd_value_removal.yml"
	],
	"report_names": [
		"registry_delete_schtasks_hide_task_via_sd_value_removal.yml"
	],
	"threat_actors": [],
	"ts_created_at": 1775434416,
	"ts_updated_at": 1775791326,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/7f43af9251c69f33bda36b6c4f8bf926abc15e8c.pdf",
		"text": "https://archive.orkl.eu/7f43af9251c69f33bda36b6c4f8bf926abc15e8c.txt",
		"img": "https://archive.orkl.eu/7f43af9251c69f33bda36b6c4f8bf926abc15e8c.jpg"
	}
}