Persistence detection via screensaver

last-byte / PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

Other

1.83k stars 180 forks source link

Persistence detection via screensaver #9

Closed d3f0x0 closed 1 year ago

d3f0x0 commented 1 year ago

Hi! Added persistence detection via screensaver

208314689-5ae57d63-3fa5-42fe-86b5-12059b1ab74e

References:

https://attack.mitre.org/techniques/T1546/002/
https://pentestlab.blog/2019/10/09/persistence-screensaver/

last-byte commented 1 year ago

Thanks for the contribution, I will check the code ASAP.