{"adoption": {"forks": 222, "observed_at": "2026-08-28T04:06:18.250485+00:00", "stars": 2139}, "canonical_url": "https://ross.abutalabs.com/products/persistencesniper", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte", "domain": ["security", "windows", "developer-tools"], "enriched": true, "function": ["security", "vulnerability-scanning", "developer-tools"], "health_score": 30, "homepage": null, "language": "PowerShell", "license": "NOASSERTION", "license_family": "other", "maturity": "active", "member_repos": ["last-byte/PersistenceSniper"], "name": "last-byte/PersistenceSniper", "platform": ["windows", "cli"], "pushed_at": "2024-12-11T16:45:04+00:00", "repo": "last-byte/PersistenceSniper", "stars": 2139, "tags": ["incident-response", "persistence-hunting", "powershell-module", "blue-team", "malware-detection", "registry"], "topics": ["incident-response", "malware-detection", "persistence", "powershell", "powershell-module", "powershell-script", "registry", "techniques", "windows"], "urls": [], "use_cases": ["find malware persistence on a compromised windows host", "hunt registry run keys and scheduled tasks used for persistence", "incident response triage of a windows machine", "audit autostart locations for suspicious entries", "check a windows endpoint for implanted persistence techniques"], "what_it_is": "PersistenceSniper is a PowerShell module for hunting persistence mechanisms implanted in Windows machines. It is aimed at Blue Teams, Incident Responders, and System Administrators and covers around 60 known persistence techniques.", "when_to_avoid": ["you need deep malware analysis or dynamic detonation rather than persistence enumeration", "you need cross-platform hunting on linux or macos", "you need real-time EDR-style continuous monitoring"], "when_to_choose": ["you are on a blue team or doing incident response on windows", "you need a quick, signed PowerShell module to enumerate known persistence mechanisms", "you are a sysadmin auditing autostart persistence on windows endpoints"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/persistencesniper", "repo": "last-byte/PersistenceSniper", "role": "main", "score": 34}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T02:51:31.465176+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9d7fad921421e6960493d6d59967159530573a81bee432217572b2fae81979ec", "fetched_at": "2026-08-28T04:06:18.250485+00:00", "kind": "readme", "missing": false, "url": "https://github.com/last-byte/PersistenceSniper"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T02:51:31.465176+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9d7fad921421e6960493d6d59967159530573a81bee432217572b2fae81979ec", "fetched_at": "2026-08-28T04:06:18.250485+00:00", "kind": "readme", "missing": false, "url": "https://github.com/last-byte/PersistenceSniper"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T02:51:31.465176+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9d7fad921421e6960493d6d59967159530573a81bee432217572b2fae81979ec", "fetched_at": "2026-08-28T04:06:18.250485+00:00", "kind": "readme", "missing": false, "url": "https://github.com/last-byte/PersistenceSniper"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T02:51:31.465176+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9d7fad921421e6960493d6d59967159530573a81bee432217572b2fae81979ec", "fetched_at": "2026-08-28T04:06:18.250485+00:00", "kind": "readme", "missing": false, "url": "https://github.com/last-byte/PersistenceSniper"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T02:51:31.465176+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9d7fad921421e6960493d6d59967159530573a81bee432217572b2fae81979ec", "fetched_at": "2026-08-28T04:06:18.250485+00:00", "kind": "readme", "missing": false, "url": "https://github.com/last-byte/PersistenceSniper"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T02:51:31.465176+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9d7fad921421e6960493d6d59967159530573a81bee432217572b2fae81979ec", "fetched_at": "2026-08-28T04:06:18.250485+00:00", "kind": "readme", "missing": false, "url": "https://github.com/last-byte/PersistenceSniper"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:06:18.250485+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T02:51:31.465176+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9d7fad921421e6960493d6d59967159530573a81bee432217572b2fae81979ec", "fetched_at": "2026-08-28T04:06:18.250485+00:00", "kind": "readme", "missing": false, "url": "https://github.com/last-byte/PersistenceSniper"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T02:51:31.465176+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9d7fad921421e6960493d6d59967159530573a81bee432217572b2fae81979ec", "fetched_at": "2026-08-28T04:06:18.250485+00:00", "kind": "readme", "missing": false, "url": "https://github.com/last-byte/PersistenceSniper"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T02:51:31.465176+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9d7fad921421e6960493d6d59967159530573a81bee432217572b2fae81979ec", "fetched_at": "2026-08-28T04:06:18.250485+00:00", "kind": "readme", "missing": false, "url": "https://github.com/last-byte/PersistenceSniper"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T02:51:31.465176+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9d7fad921421e6960493d6d59967159530573a81bee432217572b2fae81979ec", "fetched_at": "2026-08-28T04:06:18.250485+00:00", "kind": "readme", "missing": false, "url": "https://github.com/last-byte/PersistenceSniper"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 40}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1505, "days_push": 630, "days_rel": 630, "gap_med": 3.5, "n_releases_24m": 3}, "score": 34, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}