#scheduled-tasks

Windows Event ID 4702 – Security: Scheduled Task Created

Event ID 4702 logs when a new scheduled task is created on Windows systems. This security audit event helps administrators track task creation for compliance and security monitoring purposes.

Windows Event ID 4701 – Security: A Scheduled Task Was Disabled

Event ID 4701 logs when a scheduled task is disabled on Windows systems. This security audit event tracks task management changes for compliance and security monitoring purposes.

Windows Event ID 4698 – Microsoft-Windows-Security-Auditing: Scheduled Task Created

Event ID 4698 logs when a new scheduled task is created on Windows systems. This security audit event helps administrators track task creation for compliance and security monitoring purposes.