Persistence

Shows autorun entries, launch commands, registry locations, users, signatures, hashes, and enabled state.

Shows machine-wide SOFTWARE-hive autorun locations, persistence types, values, timestamps, owners, and permissions.

Shows SYSTEM-hive autorun locations, persistence types, values, timestamps, owners, and permissions.

Shows per-user autorun locations, persistence types, values, timestamps, owners, and permissions.

Shows scheduled-task identity, triggers, actions, commands, arguments, authorship, timing, and registry security.

Shows Windows service names, start modes, executable paths, accounts, dependencies, parameters, and registry metadata.