If you want to check all of Windows Task Schedulers at a glance, you can do this by using schtasks.exe which is a Windows default system program in C:\Windows\System32\.
C:\> schtasks.exe /Query /FO CSV /V > %COMPUTERNAME%_%DATE%_schtasks.csv
Once you set /FO option as CSV format, you can read this result by Excel. And you can see the title of each column if you use a /NH option. Here is a sample about the columns.
- TaskName
- Next Run Time
- Status
- Logon Mode
- Last Run Time
- Last Result
- Author
- Task To Run
- Start In
- Comment
- Scheduled Task State
- Idle Time
- Power Management
- Run As User
- Delete Task If Not Rescheduled
- Stop Task If Runs X Hours and X Mins
- Schedule
- Schedule Type
- Start Time
- Start Date
- End Date
- Days
- Months
- Repeat: Every
- Repeat: Until: Time
- Repeat: Until: Duration
- Repeat: Stop If Still Running
Especially, I focus two columns, “3. Status” and “14. Run As User” in terms of incident response.