Threat Actors may attempt to manipulate the name of a task or service to make it appear legitimate or benign. Tasks/services executed by the Task Scheduler or systemd will typically be given a name and/or description. Windows services will have a service name as well as a display name. Many benign tasks and services exist that have commonly associated names. Threat Actors may give tasks or services names that are similar or identical to those of legitimate ones.
This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.