Generic Startup Folder Persistence

nomit vyas@xoxo

•updated Feb 13, 2026•2•0•66

Detects file creation in Windows Startup folders which is a common persistence mechanism used by malware. Focuses on executable file types (.exe, .scr, .bat, .cmd, .vbs, .lnk)