Establishing Persistence

When to Use

• Maintaining access to compromised systems
• Post-exploitation techniques
• Red team operations
• Persistence testing
• Backdoor creation

When NOT to Use

• Before you have access — use the relevant initial access or privilege escalation skill first
• Building malware, implants, or loaders — out of scope
• Finding an attacker's persistence as a defender — use responding-to-incidents and hunting-threats

Windows Persistence