Function TaskSchedulerAnalysisRoutine

windowstaskscheduler.go:38–61

TaskSchedulerAnalysisRoutine analyse Windows Task Scheduler executable every 15 seconds

(pQuarantine string, pKill bool, pNotifications bool, pVerbose bool, pInfiniteLoop bool, rules *yara.Rules)

// TaskSchedulerAnalysisRoutine analyse Windows Task Scheduler executable every 15 seconds
func TaskSchedulerAnalysisRoutine(pQuarantine string, pKill bool, pNotifications bool, pVerbose bool, pInfiniteLoop bool, rules *yara.Rules) {
	for {
		tasks, err := GetTasks()
		if err != nil && pVerbose {
			logMessage(LOG_ERROR, "[ERROR]", err)
		}

		for _, t := range tasks {
			for _, e := range t.ActionList {
				paths := FormatPathFromComplexString(e.Path)
				for _, p := range paths {
					FileAnalysis(p, pQuarantine, pKill, pNotifications, pVerbose, rules, "TASKS")
				}
			}
		}

		if !pInfiniteLoop {
			wg.Done()
			break
		} else {
			time.Sleep(15 * time.Second)
		}
	}
}

// InitTaskScheduler Initialize COM API & Task scheduler connect
func InitTaskScheduler() error {