drop registry exports · scheduled task xml · startup listings · service exports · wmi exports · unified persistence view · csv export · runs locally
persistence inputs
drop registry, task xml, csv exports, or startup listings
or click
registry autorun · scheduled tasks · services · wmi subscriptions · startup folders
drop .reg, task .xml, services/tasks/wmi csv, or startup listings