Ravi Sir's Cyber Security Cards › Interview Cards
Explain persistence in MITRE terms.
Explain persistence in MITRE terms. Persistence is how an attacker survives a reboot or re-login: scheduled tasks, services, startup items, new accounts. A new auto-start service that launches their tool every boot is persistence. “Blue looks for new autostart entries, odd services, and new accounts
Read card text
What this card says
Short answer
Persistence is how an attacker survives a reboot or re-login: scheduled tasks, services, startup items, new accounts.
Example
A new auto-start service that launches their tool every boot is persistence.
Say it in the interview
“Blue looks for new autostart entries, odd services, and new accounts.”
Why it matters
If you miss persistence, the attacker comes back after you clean up.
Learn more in the lesson: 47.4 SOC Analyst Round – SIEM, Triage, MITRE