Persistence

• T1547: Boot or Logon Autostart Execution

• T1546: Event Triggered Execution

• T1053: Scheduled Task/Job

• T1176: Browser Extensions

• T1183: Image File Execution Options Injection

• T1543: Create or Modify System Process

• T1133: External Remote Services

• T1136: Create Account

• T1556: Modify Authentication Process

• T1108: Redundant Access

• T1505: Server Software Component

• T1037: Boot or Logon Initialization Scripts

• T1078: Valid Accounts