---
id: 9924
title: "Hiding Registry keys with PSReflect"
source_domain: specterops.io
source_url: "https://specterops.io/blog/2017/07/14/hiding-registry-keys-with-psreflect/"
published_at: "2017-07-14T11:04:00Z"
phying_url: "https://phying.com/item/9924"
lang: en
---

# Hiding Registry keys with PSReflect

## Summary

Introduction and Background Recently, I wanted to test detection of different kinds of registry persistence used by malware and APT groups. The Windows registry is a particularly interesting area for blue team detection as “fileless” techniques become more prevalent. One technique that has stuck in my mind is a persistence trick used by the Kovter […]

## Intelligence Metadata

- **Sources:** specterops.io
- **Published:** 2017-07-14T11:04:00Z
- **Original:** https://specterops.io/blog/2017/07/14/hiding-registry-keys-with-psreflect/
- **Phying News:** https://phying.com/item/9924