# Unveiling Persistence Mechanisms

## Context:
After successfully deploying malware via malicious documents, Kimsuky ensures its presence on the victim's system through persistence mechanisms.

## How It Works:
- **Scheduled Tasks**: The malware creates scheduled tasks to run its components at regular intervals, ensuring it remains active even after a system reboot.
- **Survivability**: This method allows the attackers to maintain long-term access to the compromised system without needing to reinfect it.

Understanding and identifying scheduled tasks configured without the user's knowledge can indicate a compromised system.