diff --git a/atomics/T1490/T1490.yaml b/atomics/T1490/T1490.yaml
index 3c0facd0..0f60cf90 100644
--- a/atomics/T1490/T1490.yaml
+++ b/atomics/T1490/T1490.yaml
@@ -101,4 +101,16 @@ atomic_tests:
     command: |
       wbadmin delete systemstatebackup -keepVersions:0
     name: command_prompt
-    elevation_required: true
\ No newline at end of file
+    elevation_required: true
+- name: Windows - Disable the SR scheduled task
+  description: |
+    Use schtasks.exe to disable the System Restore (SR) scheduled task
+  supported_platforms:
+  - windows
+  executor:
+    command: |
+      schtasks.exe /Change /TN "\Microsoft\Windows\SystemRestore\SR" /disable
+    cleanup_command: |
+      schtasks.exe /Change /TN "\Microsoft\Windows\SystemRestore\SR" /enable
+    name: powershell
+    elevation_required: true