Windows Persistence Techniques

Overview of persistence techniques available for Windows 10 and newer.

About the Research

The techniques and data presented in this catalog are the results of our academic research paper.

Our paper also provides a measurement of real-world malware and a hunting aproach for finding undocumented persistence techniques.

Paper pdf

Citing Our Work

We hope you find our work useful. You can copy the BibTeX entry below directly into your bibliography.

BibTeX
@inproceedings{vannielen2026sok,
  title     = {SoK: Systematization, Detection, and Hunting of Windows Malware Persistence Techniques},
  author    = {van Nielen, Jorik and Oliveri, Andrea and Starink, Jerre and Peter, Andreas and Huisman, Marieke
  and Aonzo, Simone and Balzarotti, Davide and Continella, Andrea},
  booktitle = {Proceedings of the ACM ASIA Conference on Computer and Communications Security (ASIACCS)},
  year      = {2026}
}