PersistenceSniper
A PowerShell module for Blue Teams, Incident Responders, and System Administrators to hunt persistence techniques implanted in Windows machines.
What is PersistenceSniper?
PersistenceSniper is a PowerShell module that hunts for persistence techniques implanted by attackers on Windows machines. It automates the detection of over 60 known persistence methods, helping security professionals identify and analyze malicious footholds during incident response. The tool is designed for remote execution and automated result parsing across multiple systems.
Blue Teams, Incident Responders, and System Administrators who need to detect and analyze persistence mechanisms on Windows environments, especially in scalable or remote scenarios.
Developers choose PersistenceSniper for its specialized focus on persistence hunting, remote execution capabilities, and coverage of techniques not always included in other tools like Sysinternals Autoruns, all within an actively maintained PowerShell module.
Overview
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
Use Cases
Best For
- Hunting for malware persistence across a Windows enterprise network
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.