Hi,
Is there a way on LEM to create a rule that will generate an alert whenever a windows scheduled task is created? I've tried searching the forums but can't seem to find the right guide. I would like to monitor every scheduled task created on our servers and make sure that it is not created by malware/spyware (mostly named at#.job eg. At1.job etc).
Any help would be very much appreciated.
Regards,
Neil