While trying to maintain persistence on a Windows system with limited privileges, which of the following registry keys should the tester use?

While trying to maintain persistence on a Windows system with limited privileges, which of the following registry keys should the tester use?
A . HKEY_CLASSES_ROOT
B . HKEY_LOCAL_MACHINE
C . HKEY_CURRENT_USER
D . HKEY_CURRENT_CONFIG

View Answer

Answer: C

Explanation:

Reference: https://www.redcanary.com/blog/windows-registry-attacks-threat-detection/