Lazarus-style persistence: Run key, scheduled task, and service on one host

ills3c Intel&Coffee@Ills3C

•updated 10 days ago•0•0•2

Detects hosts exhibiting multiple persistence mechanisms (Run keys, Scheduled Tasks, and Windows Services) within a short timeframe, indicating potential adversary persistence setup.