Persistence Mechanisms

The techniques attackers use to keep access to a system across reboots and logoffs, such as scheduled tasks, services, registry run keys, and startup entries. Defenders must know them to detect, hunt, and remove persistence.