Malware Persistence
57 items from karneades/awesome-malware-persistence ★313
-
Linux Detection Engineering - A primer on persistence mechanisms elastic.co
List of Linux persistence mechanisms.
-
RegDelNull docs.microsoft.com
Removal of registry keys with null bytes - used e.g. in run keys for evasion.
-
Autoruns docs.microsoft.com
You can learn which Windows persistence mechanisms are checked by looking at the output of Autoruns on your own client. Categories and the different locations where things were found are seen in the output. A disassembly of Autoruns lists a subset of the entries which are…
-
Persisting on Entra ID applications and User Managed Identities with Federated Credentials dirkjanm.io
Persist on Entra ID applications and User Managed Identities with Federated Credentials.
-
Borrowing Windows Hello keys for authentication and persistence dirkjanm.io
Ability to perform single-sign on with the backing cryptographic Windows Hello keys from a user session, without needing the PIN or other information/user presence.
-
Uncovering a MyKings Variant With Bootloader Persistence via Managed Detection and Response blog.trendmicro.com
Blog post about bootloader persistence.
-
Untangling Kovter's persistence methods blog.malwarebytes.com
Blog post about Kovter's persistens methos, among others, hiding in registry. Another one is Threat Spotlight: Kovter Malware Fileless Persistence Mechanism.
-
MITRE ATT&CK tactic "TA0003 - Persistence" attack.mitre.org
Persistence tactic information in the MITRE ATT&CK framework.
-
Malware persistence techniques andreafortuna.org
Good summary of multiple persistence mechanisms, ranging from multiple registry keys to more advanced one, like COM hijacking.
