### Summary
KeyBoy ensures persistence on compromised systems by modifying the Windows registry, allowing their malware to persist across reboots.

### Techniques Used
- **Registry Key Alteration:**
  - Addition of new registry keys to execute payloads during system startup.
  - Modification of existing keys that affect system behavior and user settings.

### Detection and Prevention
- **Regular Audit:** Conduct regular audits of registry keys for unauthorized changes.
- **Use of GPOs:** Implement Group Policy Objects to restrict registry modifications by unauthorized users.