mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
Desiree Beck
c2df3d4e10
* Changing conti name * Mbc 3 (#125) * update version number * update links * update version number * update version number * update version number * 2.3 to main in matrix * link fix * v3 faq update --------- Co-authored-by: ryan <ryanxu@wustl.edu> --------- Co-authored-by: ryan <ryanxu@wustl.edu>
33 lines
1.4 KiB
Markdown
33 lines
1.4 KiB
Markdown
<table>
|
|
<tr>
|
|
<td><b>ID</b></td>
|
|
<td><b>OB0012</b></td>
|
|
</tr>
|
|
<td><b>Created</b></td>
|
|
<td><b>1 August 2019</b></td>
|
|
</tr>
|
|
<tr>
|
|
<td><b>Last Modified</b></td>
|
|
<td><b>27 September 2023</b></td>
|
|
</tr>
|
|
</table>
|
|
|
|
|
|
# Persistence
|
|
|
|
Behaviors that enable malware to remain on a system regardless of system events, such as reboots.
|
|
|
|
* **Bootkit** [F0013](../defense-evasion/bootkit.md)
|
|
* **Component Firmware** [F0009](../persistence/component-firmware.md)
|
|
* **Hide Artifacts** [E1564](../defense-evasion/hide-artifacts.md)
|
|
* **Hidden Files and Directories** [F0005](../defense-evasion/hidden-files-and-directories.md)
|
|
* **Hijack Execution Flow** [F0015](../defense-evasion/hijack-execution-flow.md)
|
|
* **Install Insecure or Malicious Configuration** [B0047](../defense-evasion/install-insecure-or-malicious-configuration.md)
|
|
* **Kernel Modules and Extensions** [F0010](../persistence/kernel-modules-and-extensions.md)
|
|
* **Malicious Network Driver** [B0026](../persistence/malicious-network-driver.md)
|
|
* **Modify Existing Service** [F0011](../persistence/modify-existing-service.md)
|
|
* **Modify Registry** [E1112](../defense-evasion/modify-registry.md)
|
|
* **Registry Run Keys / Startup Folder** [F0012](../persistence/registry-run-keys-startup-folder.md)
|
|
* **Ingress Tool Transfer** [E1105](../command-and-control/ingress-tool-transfer.md)
|
|
* **Shutdown Event** [B0035](../persistence/shutdown-event.md)
|