home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-hunting-for-startup-folder-persistence-skill-md
debuggingtools

hunting-for-startup-folder-persistence

Detect T1547.001 startup folder persistence by monitoring Windows startup directories for suspicious file creation, analyzing autoruns entries, and using Python watchdog for real-time filesystem monitoring.

mukul975
maintainer
mukul975
更新于 4/6/2026
星标
4240
分支
464
quick start

Installation and usage

Detect T1547.001 startup folder persistence by monitoring Windows startup directories for suspicious file creation, analyzing autoruns entries, and using Python watchdog for real-time filesystem monitoring.

安装
$ install --globalskills.sh
使用

安装后,您可以通过在终端运行以下命令来使用此技能:

skills use hunting-for-startup-folder-persistence