H3XA — Operational Evidence

TypeTool

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[at](https://attack.mitre.org/software/S0110) is used to schedule tasks on a system to run at a specified date or time.(Citation: TechNet At)(Citation: Linux at)

Labels

tool

5 recorded

Relationships

uses

to At

Technique

uses

from BRONZE BUTLER

Group

uses

from GALLIUM

Group

uses

from Leviathan

Group

uses

from Night Dragon

Campaign

3 external

References

mitre-attack

S0110

open

Linux at

https://man7.org/linux/man-pages/man1/at.1p.html

open

TechNet At

https://technet.microsoft.com/en-us/library/bb490866.aspx

open