I am trying to find a task in Windows Task Scheduler on an image of a Windows 10 x64.
All I know about this taks is that when it is triggered, it disables a service which I also know nothing about.
I have manually gone through Task Scheduler a few times but have not been able to find it.
Event Viewer and auditing was disabled before I started looking for the task, so even if it has run before it is likely unlogged.
Although I have found an option to filter audits in Event Viewer, I do not know about anything similar on Task Scheduler.
I am reletively new to cybersecutiry so I apologize if this is an obvious question.
Is it possible to filter tasks by action in Task Scheduler?
If not, why is it not possible and is there any external code or program I could use to narrow down my search?