Beyond good ol’ Run key, Part 117

September 28, 2019 in Anti-Forensics, Autostart (Persistence)

This is yet another quickie.

SQL Server Management Studio supports plugins, so it is good to have a look if any of them is dodgy:

  • HKCU or HKLM\SOFTWARE\Microsoft\Microsoft SQL Server\<version>\Tools\Shell\Addins\<entry>=<addin DLL>
Share this :)

Comments Off on Beyond good ol’ Run key, Part 117

Comments are closed.