## Overview
Following the execution of the Elise backdoor, our team has successfully identified the persistence mechanisms employed by the threat actors. Understanding these methods is critical for preventing further unauthorized access.

## Key Findings
- **Registry Modifications**: Alterations made to the Windows Registry to ensure the backdoor loads upon system startup.
- **Service Creation**: New services created, disguised as legitimate system processes, to maintain active connections to C2 infrastructure.
- **Scheduled Tasks**: Task Scheduler used to periodically execute scripts that check for backdoor updates.

## Recommendations
Focus on monitoring internal network traffic for signs of lateral movement as the adversary attempts to expand their foothold.