georgeneokq / artifact-exterminator

Simple, flexible command-line tool for conducting anti-forensics (for research purposes only)
0 stars 0 forks source link

Refactor: Polling for kill switch to be persistent after reboot #26

Open georgeneokq opened 1 year ago

georgeneokq commented 1 year ago

The task scheduled to run upon reboot to clear ShimCache entries should run the program with an extra flag that indicates that polling for kill switch should be continued. Cleanup of registry and shimcache should only be performed after the kill switch is activated.

Tasks: