Obsidian Sandstorm SilverGorilla Scheduled Task and Run Key Persistence

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•2

Detects persistence mechanisms associated with Obsidian Sandstorm activity, including scheduled task creation, registry run key modification, and startup folder file drops initiated by suspicious processes or from non-standard directories like AppData/Temp.