Privilege Escalation Windows > Scheduled Tasks > findstr

[ThibaudLopez]

Hi @xapax,

In chapter Privilege Escalation Windows > Scheduled Tasks you say:

I have not been able to figure out how to just output the relevant strings with findstr. So if you know a better way please notify me.

The solution is to rediect stderr to stdout, then findstr will work:

schtasks /query /fo LIST /v 2>&1 | findstr /c:"Task To Run"