Understanding MITRE ATT&CK T1547

Boot or Logon Autostart Execution

MITRE ATT&CK technique T1547, known as Boot or Logon Autostart Execution, refers to a tactic used by attackers to maintain persistence on a compromised system. This technique exploits mechanisms that allow programs to start automatically when a computer boots up or when a user logs in. Attackers leverage this method to ensure their malware or unauthoriz…