PersistenceSniper is a digitally signed PowerShell module aimed at blue teams and incident responders for automated detection of persistence mechanisms on Windows systems. It implements detection logic for techniques listed in MITRE ATT&CK (e.g. registry run keys, scheduled tasks, service modifications) and is regularly updated with new detection paths.

Features

  • Detects persistence across run keys, scheduled tasks, services, and WMI
  • Aligns with MITRE ATT&CK persistence techniques
  • Digitally signed and published via PowerShell Gallery
  • Lightweight module (~3000 lines), no external dependencies
  • Regular releases adding detection capabilities
  • Suitable for automation and integration into SOAR workflows

Project Samples

Project Activity

See All Activity >

Categories

Security

License

MIT License

Follow PersistenceSniper

PersistenceSniper Web Site

Other Useful Business Software
$300 Free Credits for Your Google Cloud Projects Icon
$300 Free Credits for Your Google Cloud Projects

Start building on Google Cloud with $300 in free credits. No commitment, no credit card required until you're ready to scale.

Launch your next project with $300 in free Google Cloud credits—no strings attached. Test, build, and deploy without risk. Use your credits across the entire Google Cloud platform to find what works best for your needs. After your credits are used, continue with always-free tier services. Only pay when you're ready to scale. Sign up in minutes and start exploring.
Start Free Trial
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of PersistenceSniper!

Additional Project Details

Operating Systems

Windows

Programming Language

PowerShell

Related Categories

PowerShell Security Software

Registered

2025-07-28