analyzing-malware-persistence-with-autoruns
CommunityDetect and map malware persistence via Autoruns.
AuthorAxxxxxxaaann
Version1.0.0
Installs0
System Documentation
What problem does it solve?
It helps security teams identify and analyze malware persistence mechanisms that are configured to auto-start on Windows, enabling faster containment and remediation.
Core Features & Use Cases
- Automated parsing of Autoruns CSV exports to surface persistence patterns
- Detect unsigned binaries, missing publisher data, suspicious paths, and LOLBin usage
- Use in incident response, threat hunting, and SOC workflows to map persistence techniques to MITRE ATT&CK techniques
Quick Start
Analyze an Autoruns CSV export from a Windows host to surface persistence indicators and suspicious startup entries.
Dependency Matrix
Required Modules
None requiredComponents
scriptsreferencesassets
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: analyzing-malware-persistence-with-autoruns Download link: https://github.com/Axxxxxxaaann/KAIRI-Skills/archive/main.zip#analyzing-malware-persistence-with-autoruns Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.