Which of the following persistence techniques will be identified using the Autoruns utility?
Which of the following persistence techniques will be identified using the Autoruns utility?
Autoruns is a utility that can identify Auto-Start Extensibility Points (ASEPs) including scheduled tasks, startup programs, and services. Web shells, account creation, and SSH key modification are not within its scope of detection. Therefore, the correct persistence technique that would be identified by Autoruns is scheduled tasks.
Correct answer: B Autoruns can be used to identify Auto-Start Extensibility Points (ASEPs), scheduled tasks, services, WMI event subscriptions, and event-triggered execution through debugging capabilities. Adding a new user account or web shells will evade Autoruns detection. Reference: 504.5 Evasive and Post-Exploitation Attacks p. 43