← All tools

PersistenceSniper

https://github.com/last-byte/PersistenceSniper

Free

Categories

Forensics Post-Exploitation

Description

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

Keywords

incident-response malware-detection persistence powershell powershell-module powershell-script registry techniques windows

Example Usage

PS> Install-Module PersistenceSniper
PS> Import-Module PersistenceSniper
PS> Find-AllPersistence