Skip to content

Glossary: Attacks and Indicators

Run key

A Windows Registry location, such as HKCU\...\CurrentVersion\Run, whose commands start at every login. Fileless malware uses it to come back after a restart.

Where the book teaches it

Related terms

fileless malwarepersistence