While trying to maintain persistence on a Windows system with limited privileges, which of the following registry keys should the tester use?

Posted by: Pdfprep Category: PT0-001 Tags: , ,

While trying to maintain persistence on a Windows system with limited privileges, which of the following registry keys should the tester use?
A . HKEY_CLASSES_ROOT
B . HKEY_LOCAL_MACHINE
C . HKEY_CURRENT_USER
D . HKEY_CURRENT_CONFIG

Answer: C

Explanation:

Reference: https://www.redcanary.com/blog/windows-registry-attacks-threat-detection/

Leave a Reply

Your email address will not be published.