Update EDR_telem_windows.json - Uptycs Scheduled Task

[joshlemon]

EDR Telemetry Pull Request

Contribution Details

Telemetry Validation

Run the following search in Uptycs for scheduled_tasks:

select * from scheduled_tasks where upt_day >= CAST(date_format(current_date - INTERVAL '1' day, '%Y%m%d') AS INTEGER) and upt_asset_id='fc6c4d56-a699-4b74-64b0-96d564c1be2e'  and name like '%T1053_005%' order by upt_time DESC

The above search produces the following output in Uptycs scheduled_tasks telemetry:

Documentation or Evidence:

• Official documentation (link: )
• Screenshots attached
• Sanitized logs provided
• Private documentation (will share confidentially)

Type of Contribution

• Adding telemetry information for an existing EDR product
• Adding a new EDR product that meets eligibility criteria
• Proposing new event categories/sub-categories
• Documentation improvement
• Tool enhancement

Validation Details

EDR Product Information

• EDR Product Name: Uptycs
• EDR Version: N/A
• Operating System(s) Tested: Windows

Testing Methodology

Ran the Atomic Red script for Scheduled Task creation.

PS C:\AtomicRedTeam> Import-Module C:\AtomicRedTeam\invoke-atomicredteam\Invoke-AtomicRedTeam.psd1 -Force
PS C:\AtomicRedTeam> Get-Command Invoke-AtomicTest

Additional Notes

This is simply to move the existing telemetry metric from "via Logs" to the built-in telemetry in Uptycs.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}