How Hackers Establish Persistence

In this 19-minute cybersecurity video, learn how to hunt for evidence of adversaries establishing persistence in your environment with Andrew Prince from Cyber Mentor. Discover the telltale signs of malware implants and common persistence techniques hackers use. The tutorial covers critical areas including autostart locations, hunting run keys, Windows services, service failure recovery abuse, scheduled tasks, and WMI event consumers. Follow along with practical demonstrations of creating and hunting WMI event consumer backdoors, complete with code examples. Gain valuable threat hunting skills that build on concepts covered in SOC 101, helping security professionals detect intrusions more effectively by understanding these common persistence methods used by attackers.