T1053: Scheduled Task/Job

T1053: Scheduled Task/Job

Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time.

View on MITRE ATT&CK →

AWS CreateAssociation

Creates an SSM State Manager association, binding a document to instances for persistent or scheduled command execution.

Cloud Service: AWS - SSM

Tactics:

Persistence

Techniques:

T1053

Tags:

AWS SSM