🊜 Persistence and Escalation

📚 Analysis Tips

Approach Run a tool to collect all the artefacts for this OS (for example, autorunc.exe for Windows) on the machines in question.

Techniques

This is about … .

Techniques Overview

This is about … .

WMI Event Consumers

A little theory… . Event filter is a condition that should be met for something to happen.