System Persistence

Characteristics and Detectability of Windows Auto-Start Extensibility Points in Memory Forensics

We propose a taxonomy of the Windows ASEPs, considering the features that are used or abused by malware to achieve persistence.

Daniel Uroz, Ricardo J. Rodríguez