ATT&CK Series: Persistence
Tags
attack-pattern: Data Credentials - T1589.001 Domain Account - T1087.002 Domain Account - T1136.002 Local Account - T1087.001 Local Account - T1136.001 Local Accounts - T1078.003 Multi-Factor Authentication - T1556.006 Powershell - T1059.001 Registry Run Keys / Startup Folder - T1547.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Credential Dumping - T1003 Powershell - T1086 Registry Run Keys / Start Folder - T1060 Scheduled Task - T1053 Third-Party Software - T1072 Valid Accounts - T1078 Valid Accounts
Show in Graph
Common Information
Type Value
UUID 8cde2f95-b612-46d7-9a14-205dac3390e1
Fingerprint bd94db1d01e1fcc5
Analysis status DONE
Considered CTI value 0
Text language
Published April 2, 2019, noon
Added to db Nov. 9, 2023, 12:53 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline ATT&CK Series: Persistence
Title ATT&CK Series: Persistence
Detected Hints/Tags/Attributes 63/1/12
Source URLs
Redirection Url
Details Source https://www.optiv.com/insights/discover/blog/attck-series-persistence
URL Provider
Details Provider Source level domain
Details optiv.com www.optiv.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 346 ✔ Optiv Blog https://www.optiv.com/resources/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 249 
schtasks.exe
Details MITRE ATT&CK Techniques 279 
T1060
Details MITRE ATT&CK Techniques 289 
T1003
Details Windows Registry Key 11 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell
Details Windows Registry Key 10 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User
Details Windows Registry Key 5 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell
Details Windows Registry Key 5 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User
Details Windows Registry Key 582 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Details Windows Registry Key 480 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
Details Windows Registry Key 493 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Details Windows Registry Key 470 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
Details Windows Registry Key 3 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx