GIAC Certified Incident Handler (GCIH) — Question 33

Which of the following persistence techniques will be identified using the Autoruns utility?

Answer options

• A. Web Shells
• B. Scheduled tasks
• C. Account creation
• D. SSH key modification

Correct answer: A

Explanation

The Autoruns utility is specifically designed to identify various types of persistence mechanisms, including Web Shells, which are often used in web-based attacks. Scheduled tasks, account creation, and SSH key modification are not directly associated with Autoruns, as they involve different aspects of system configuration and user management.