This week I talk about examining Windows Scheduled Task change events for evidence of persistence.