Registry Run Key or Startup Folder LNK Persistence (MiniJunk)

Ibrahim Saud@tektrix

•updated Jul 2, 2026•5•0•11

Detects the creation or modification of Windows Registry Run keys or the addition of files into the startup directory. These are common persistence mechanisms used by adversaries to ensure programs execute automatically upon system boot or user logon.