# Windows Persistence

:warning: Content of this page has been moved to [InternalSecurityResources/redteam/persistence/windows](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/)

* [Tools](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#tools)
* [Hide Your Binary](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#hide-your-binary)
* [Disable Antivirus and Security](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#disable-antivirus-and-security)
  * [Antivirus Removal](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#antivirus-removal)
  * [Disable Windows Defender](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#disable-windows-defender)
  * [Disable Windows Firewall](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#disable-windows-firewall)
  * [Clear System and Security Logs](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#clear-system-and-security-logs)
* [Simple User](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#simple-user)
  * [Registry HKCU](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#registry-hkcu)
  * [Startup](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#startup)
  * [Scheduled Tasks User](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#scheduled-tasks-user)
  * [BITS Jobs](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#bits-jobs)
* [Serviceland](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#serviceland)
  * [IIS](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#iis)
  * [Windows Service](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#windows-service)
* [Elevated](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#elevated)
  * [Registry HKLM](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#registry-hklm)
    * [Winlogon Helper DLL](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/)
    * [GlobalFlag](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/)
  * [Startup Elevated](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#startup-elevated)
  * [Services Elevated](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#services-elevated)
  * [Scheduled Tasks Elevated](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#scheduled-tasks-elevated)
  * [Binary Replacement](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#binary-replacement)
    * [Binary Replacement on Windows XP+](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#binary-replacement-on-windows-xp)
    * [Binary Replacement on Windows 10+](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#binary-replacement-on-windows-10)
  * [RDP Backdoor](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#rdp-backdoor)
    * [utilman.exe](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#utilman.exe)
    * [sethc.exe](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#sethc.exe)
  * [Remote Desktop Services Shadowing](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#remote-desktop-services-shadowing)
  * [Skeleton Key](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#skeleton-key)
  * [Virtual Machines](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#virtual-machines)
  * [Windows Subsystem for Linux](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#windows-subsystem-for-linux)
* [Domain](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#domain)
  * [Golden Certificate](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#golden-certificate)
  * [Golden Ticket](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#golden-ticket)
* [References](https://mahbubzulkarnain.github.io/catatan-seekor-the-series/redteam/persistence/windows-persistence/#references)