Hiding Registry keys with PSReflect
specterops.io | blog
Summary
Introduction and Background Recently, I wanted to test detection of different kinds of registry persistence used by malware and APT groups. The Windows registry is a particularly interesting area for blue team detection as “fileless” techniques become more prevalent. One technique that has stuck in my mind is a persistence trick used by the Kovter […]
- Published
- Collected
--- id: 9924 title: "Hiding Registry keys with PSReflect" source_domain: specterops.io source_url: "https://specterops.io/blog/2017/07/14/hiding-registry-keys-with-psreflect/" published_at: "2017-07-14T11:04:00Z" phying_url: "https://phying.com/item/9924" lang: en --- # Hiding Registry keys with PSReflect ## Summary Introduction and Background Recently, I wanted to test detection of different kinds of registry persistence used by malware and APT groups. The Windows registry is a particularly interesting area for blue team detection as “fileless” techniques become more prevalent. One technique that has stuck in my mind is a persistence trick used by the Kovter […] ## Intelligence Metadata - **Sources:** specterops.io - **Published:** 2017-07-14T11:04:00Z - **Original:** https://specterops.io/blog/2017/07/14/hiding-registry-keys-with-psreflect/ - **Phying News:** https://phying.com/item/9924