dissect.target
dissect.target copied to clipboard
Add plugin for Image File Execution Options
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\*
Values:
-
MonitorProcess
-
Debugger
hxxps://pentestlab.blog/2020/01/13/persistence-image-file-execution-options-injection/