domains / families / security / hunting-for-persistence-mechanisms-in-windows

hunting-for-persistence-mechanisms-in-windows

separate

Systematically hunts for adversary persistence mechanisms across Windows

When to use

• During periodic proactive threat hunts for dormant backdoors
• After an incident to identify all persistence mechanisms an attacker planted
• When investigating unusual services, scheduled tasks, or startup entries
• When threat intel reports describe new persistence techniques in the wild
• During security posture assessments to identify unauthorized persistent software

Skill page

Source