ad-persistence
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONNO_CODE
Full Analysis
- [PERSISTENCE]: The skill provides comprehensive documentation on establishing persistence within Windows environments. It covers host-level techniques such as Scheduled Tasks, Registry Run keys, COM Hijacking, WMI Event Subscriptions, and domain-level techniques including Golden/Silver Tickets, Skeleton Key, DSRM, and AdminSDHolder ACL modifications.
- [COMMAND_EXECUTION]: The instructions include numerous command-line examples for system utilities like schtasks, reg, and sc, as well as third-party security tools such as Mimikatz, Rubeus, SharPersist, and the Impacket suite to modify system configurations and execute payloads.
- [PRIVILEGE_ESCALATION]: The skill details methods for maintaining and escalating administrative privileges, such as modifying AdminSDHolder ACLs, configuring Resource-Based Constrained Delegation (RBCD) to krbtgt, and performing Token manipulation.
- [NO_CODE]: The skill consists strictly of markdown documentation and command references. It does not contain any executable scripts, automated installation routines, or logic that would be automatically triggered by the agent platform.
Audit Metadata