Unusual file written in Startup folder
Identifies suspicious files written to the startup folder that would allow adversaries to maintain persistence on the endpoint.
- Platform: Windows
- Severity: High
- MITRE Tactic: Persistence
- MITRE Techniques: T1547, T1547.001