Beyond good ol’ Run key, Part 117
September 28, 2019 in Anti-Forensics, Autostart (Persistence)
This is yet another quickie.
SQL Server Management Studio supports plugins, so it is good to have a look if any of them is dodgy:
- HKCU or HKLM\SOFTWARE\Microsoft\Microsoft SQL Server\<version>\Tools\Shell\Addins\<entry>=<addin DLL>
Comments are closed.