Task Scheduling

Creating a Schedule

1. Navigate to Scheduling
2. Click Create Schedule
3. Configure:
   • Test to execute
   • Target agents (specific agents or all)
   • Frequency — Once, daily, weekly, monthly
   • Time — Specific time, or randomized within office hours (fleet-wide or per machine)
   • Platform/Architecture for the binary
   • Target ES index (optional)

Schedule Types

Type	Description
Once	Execute at a specific date and time
Daily	Execute every day at the specified time
Weekly	Execute on specific days of the week
Monthly	Execute on a specific day of the month

Randomized Timing

Schedules support three timing modes:

Mode	Behavior
Fixed time	Executes at the exact time you set, every run
Randomized (fleet together)	One random time within office hours (9 AM – 5 PM) per run, shared by all targeted machines
Randomized per machine	Each targeted agent gets its own independent random time within office hours

Randomization provides more realistic simulation of attacker behavior than executing at the same time every day. Per-machine randomization additionally avoids the whole fleet lighting up detection systems at once — useful for staggering load and for realistic dispersed activity.

Priority Queue

Higher-priority tasks are assigned before lower-priority ones when multiple tasks are pending for the same agent.

Managing Schedules

• Pause/Resume — Temporarily disable a schedule without deleting it
• Edit — Modify any schedule parameter
• Delete — Permanently remove a schedule