The repository tries to gather an information about Windows persistence mechanisms to make the protection/detection more efficient. Most of the information is well known for years, being actively used within various scenarios.
Expect more. I am doing my best to add new entries each day.
👨💼 ⚙ Task Scheduler
👨💼 .chm helper DLL *
👨💼 HKCU Load
👨💼 Startup Folder
⚙ Autodial DLL *
Want more? Check the list tomorrow. :)
* Based on a research made by @Hexacorn - one of the best persistence hunters.
⚙ It is enough to turn computer on to make the code run.
👨💼 End-user can do it.