Living in the Run Key: Practical Persistence for Red Team Ops

Description from ATT&CK Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or sta