PersistenceSniper v1.12.0

This release fixes a bug in the OutputCSV parameter, which up to version 1.11.0 would included false positives filtered out by the DiffCSV parameter, as well as implementing support for logging the output of the tool to the Windows Event Log, thanks to Antonio Blescia.

PersistenceSniper v1.11.0

This release fixes a bug in the CmdAutoRun detection and adds three new detections. Check CHANGELOG.

PersistenceSniper v1.10.1

This release fixes a bug in the DiffCSV parameter.

PersistenceSniper v1.9.3

This release adds support for checking artefacts against Virustotal through its APIs (you need a valid API key) using the -VTApiKey parameter and implements detections for malicious Office templates.

PersistenceSniper v1.9.2

This release contains some minor bug fixes implemented by @suinswofi

PersistenceSniper v1.9.1

New bug fixes and detections. Added detections:

• Power Automate
• BITS Jobs NotifyCmdLine
• Screensaver

PersistenceSniper v1.8.0

A number of new detections have been implemented, including powershell profiles and telemetry commands. Check the changelog for a complete list.

PersistenceSniper v1.7.1

This minor release fixes an issue with version 1.7.0 which had PersistenceSniper.psm1 not digitally signed.

PersistenceSniper v1.7.0

This release of PersistenceSniper features the detection for accessibility tools backdoors.

PersistenceSniper v1.6.0

This release implements checks for the persistence technique described in this post: https://persistence-info.github.io/Data/tsinitialprogram.html