[**T1053**](https://attack.mitre.org/techniques/T1053/) Scheduled tasks can be used by adversaries to schedule running malicious code at some specified date and time. **Adding it as a PBA:** \- *LINUX*: not applicable ([T1168](https://attack.mitre.org/techniques/T1168/)) \- *WINDOWS*: using `schtasks` (see [this](https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/T1053/T1053.md#atomic-test-2---scheduled-task-local)) [**Mapping the technique to the ATT&CK matrix**](https://github.com/shreyamalviya/monkey/blob/guide-to-add-attack-technique/monkey/Adding-a-new-attack-technique.md)