Chapter 12: Maintaining Control within the Environment

1. Reverse shells can be lost when a target system is rebooted, or the exploited vulnerability can be patched. Maintaining access eliminates the need to reexploit a system.
2. An APT is an advanced persistent threat. These type of threats have the ability to maintain access to a target system for months before being detected.
3. Backdoors using Trojans and C2 servers.
4. Living off the land is the ability to use the current operating system's tools to perform tasks, such as PowerShell within Windows operating systems.
5. HKLM contains registry keys that run at system boot; HKCU contains registry keys that run when a user logs in.