Persistence

Parses CSV files produced by the Windows Autoruns utility, extracting entries that define programs or scripts that start automatically

Extracts persistence‑related registry data from the USER hive (HKCU)

Extracts persistence‑related registry data from the SOFTWARE hive

Extracts persistence‑related registry data from the SYSTEM hive

Extracts metadata for Windows scheduled tasks stored in the Software hive

Extracts all service definitions from a Windows System hive, in the related control‑set keys