Modify User Shell Folders Startup Value

Google SecOps@GoogleSecOps

•updated Jun 25, 2025•0•0•1

Detect modification of the startup key to a path where a payload could be stored to be launched during startup