RED TEAM Operator: Windows Persistence Course
Buy now
Learn more
Intro and Setup
Introduction to Windows Persistence
Intro Addendum
Course VM Setup
RTO-PERS.ova
RTO-pers.zip
Low Privilege Persistence
Startup Folder and Registry Keys
Logon Scripts
Shortcut Mods
Screensavers
Powershell Profile
DLL Proxying - Introduction
DLL Proxying - Demo
Component Object Model - Introduction
COMs Registry
COM Hijacks and Proxies
Admin Level Persistence
Elevated Scheduled Tasks
Multiaction Tasks
New & Modified Services
IFEO - Debugger / SilentProcessExit /...
Application Shims
Windows Management Instrumentation - ...
WMI Event Subscription
AppCert DLLs
AppInit DLLs
Netsh Helper DLLs
Winlogon - SHELL / USERINIT
Time Providers
Port Monitors
Local Security Authority - Introduction
LSA-as-a-Persistence - SSPs & AuthPkgs
LSA-as-a-Persistence - Password Filters
Assignments
Assignment #1
Assignment #2
Assignment #3
Assignment #4
Wrap up
Summary and Next Steps
Products
Course
RED TEAM Operator: Windows Persistence Course
RED TEAM Operator: Windows Persistence Course
RED TEAM Operator: Windows Persistence Course
Buy now
Learn more
Intro and Setup
Introduction to Windows Persistence
Intro Addendum
Course VM Setup
RTO-PERS.ova
RTO-pers.zip
Low Privilege Persistence
Startup Folder and Registry Keys
Logon Scripts
Shortcut Mods
Screensavers
Powershell Profile
DLL Proxying - Introduction
DLL Proxying - Demo
Component Object Model - Introduction
COMs Registry
COM Hijacks and Proxies
Admin Level Persistence
Elevated Scheduled Tasks
Multiaction Tasks
New & Modified Services
IFEO - Debugger / SilentProcessExit /...
Application Shims
Windows Management Instrumentation - ...
WMI Event Subscription
AppCert DLLs
AppInit DLLs
Netsh Helper DLLs
Winlogon - SHELL / USERINIT
Time Providers
Port Monitors
Local Security Authority - Introduction
LSA-as-a-Persistence - SSPs & AuthPkgs
LSA-as-a-Persistence - Password Filters
Assignments
Assignment #1
Assignment #2
Assignment #3
Assignment #4
Wrap up
Summary and Next Steps
Learn more
Buy now
27 persistence methods in Windows. From basic to advanced, unique and used by nation-state threat actors.
Intro and Setup
5 Lessons
Introduction to Windows Persistence
Intro Addendum
Course VM Setup
RTO-PERS.ova
RTO-pers.zip
Low Privilege Persistence
10 Lessons
Startup Folder and Registry Keys
Logon Scripts
Shortcut Mods
Screensavers
Powershell Profile
DLL Proxying - Introduction
DLL Proxying - Demo
Component Object Model - Introduction
COMs Registry
COM Hijacks and Proxies
Admin Level Persistence
16 Lessons
Elevated Scheduled Tasks
Multiaction Tasks
New & Modified Services
IFEO - Debugger / SilentProcessExit /...
Application Shims
Windows Management Instrumentation - ...
WMI Event Subscription
AppCert DLLs
AppInit DLLs
Netsh Helper DLLs
Winlogon - SHELL / USERINIT
Time Providers
Port Monitors
Local Security Authority - Introduction
LSA-as-a-Persistence - SSPs & AuthPkgs
LSA-as-a-Persistence - Password Filters
Assignments
4 Lessons
Assignment #1
Assignment #2
Assignment #3
Assignment #4
Wrap up
1 Lesson
Summary and Next Steps