:py:mod:`dissect.target.plugins.os.windows.tasks` ================================================= .. py:module:: dissect.target.plugins.os.windows.tasks Module Contents --------------- Classes ~~~~~~~ .. autoapisummary:: dissect.target.plugins.os.windows.tasks.TasksPlugin Attributes ~~~~~~~~~~ .. autoapisummary:: dissect.target.plugins.os.windows.tasks.log dissect.target.plugins.os.windows.tasks.TaskRecord .. py:data:: log .. py:data:: TaskRecord .. py:class:: TasksPlugin(target: dissect.target.Target) Bases: :py:obj:`dissect.target.plugin.Plugin` Plugin for retrieving scheduled tasks on a Windows system. :param target: The target system. .. py:attribute:: PATHS .. py:attribute:: GLOB_PATHS :value: ['sysvol/windows/system32/GroupPolicy/DataStore/*/Machine/Preferences/ScheduledTasks/*',... .. py:method:: check_compatible() -> None Perform a compatibility check with the target. This function should return ``None`` if the plugin is compatible with the current target (``self.target``). For example, check if a certain file exists. Otherwise it should raise an ``UnsupportedPluginError``. :raises UnsupportedPluginError: If the plugin could not be loaded. .. py:method:: tasks() -> Iterator[Union[TaskRecord, flow.record.GroupedRecord]] Return all scheduled tasks on a Windows system. On a Windows system, a scheduled task is a program or script that is executed on a specific time or at specific intervals. An adversary may leverage such scheduled tasks to gain persistence on a system. .. rubric:: References https://en.wikipedia.org/wiki/Windows_Task_Scheduler :Yields: The scheduled tasks found on the target.