> For the complete documentation index, see [llms.txt](https://oscp.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oscp.adot8.com/windows-privilege-escalation/scheduled-tasks.md).

# Scheduled tasks

```
schtasks /query /fo LIST /v
```

Check permissions on binary

```
icacls C:\Users\john\Documents\Cleanup.exe
```

If permissions are sufficient (I F) replace with malicious binary