Skip to content

Autoruns

Jump to bottom
Tony Phipps edited this page Mar 27, 2018 · 2 revisions

Malicious Startup

Persistence

  1. Monitor Registry for changes to run keys that do not correlate with known software, patch cycles, etc.

  2. Monitor the start folder for additions or changes

SELECT UNIQUE Command, Location
Clone this wiki locally