Beyond good ol’ Run key, Part 102

February 12, 2019 in Anti-Forensics, Autostart (Persistence)

This is probably the shortest post in this series, but since it’s yet another feature of Windows, why bother describing something that is already very nicely described on Microsoft web site.

If you ever wondered what these entries (PersistentAddinsRegistered) in Registry are:

– they are part of the registration of Filters Handlers for Windows Search as described here and here.

Comments are closed.