last-byte/PersistenceSniper

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2139 stars · 222 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PersistenceSniper is a PowerShell module for hunting persistence mechanisms implanted in Windows machines. It is aimed at Blue Teams, Incident Responders, and System Administrators and covers around 60 known persistence techniques.

Use cases

• find malware persistence on a compromised windows host
• hunt registry run keys and scheduled tasks used for persistence
• incident response triage of a windows machine
• audit autostart locations for suspicious entries
• check a windows endpoint for implanted persistence techniques

When to choose

• you are on a blue team or doing incident response on windows
• you need a quick, signed PowerShell module to enumerate known persistence mechanisms
• you are a sysadmin auditing autostart persistence on windows endpoints

When to avoid

• you need deep malware analysis or dynamic detonation rather than persistence enumeration
• you need cross-platform hunting on linux or macos
• you need real-time EDR-style continuous monitoring

Facets

cli-tool · maturity active

security vulnerability-scanning developer-tools security windows developer-tools windows cli incident-response persistence-hunting powershell-module blue-team malware-detection registry

Member repositories

For agents

markdown · JSON · MCP: product_card(name="last-byte/PersistenceSniper")