ID OB0012
Created 1 August 2019
Last Modified 27 September 2023
# Persistence Behaviors that enable malware to remain on a system regardless of system events, such as reboots. * **Bootkit** [F0013](../defense-evasion/bootkit.md) * **Component Firmware** [F0009](../persistence/component-firmware.md) * **Hide Artifacts** [E1564](../defense-evasion/hide-artifacts.md) * **Hidden Files and Directories** [F0005](../defense-evasion/hidden-files-and-directories.md) * **Hijack Execution Flow** [F0015](../defense-evasion/hijack-execution-flow.md) * **Install Insecure or Malicious Configuration** [B0047](../defense-evasion/install-insecure-or-malicious-configuration.md) * **Kernel Modules and Extensions** [F0010](../persistence/kernel-modules-and-extensions.md) * **Malicious Network Driver** [B0026](../persistence/malicious-network-driver.md) * **Modify Existing Service** [F0011](../persistence/modify-existing-service.md) * **Modify Registry** [E1112](../defense-evasion/modify-registry.md) * **Registry Run Keys / Startup Folder** [F0012](../persistence/registry-run-keys-startup-folder.md) * **Ingress Tool Transfer** [E1105](../command-and-control/ingress-tool-transfer.md) * **Shutdown Event** [B0035](../persistence/shutdown-event.md)