### Overview
Upon activation, SUNBURST establishes persistence to ensure its continued presence on compromised systems.

### Key Observations
- **Registry Alterations**: Modifies registry keys to launch at startup.
- **Scheduled Tasks**: Creates tasks that mimic valid system operations for periodic execution.

### Recommendations
- Audit registry changes and scheduled tasks for anomalies.

### Next Steps
Investigate command and control (C2) communication methods utilized by SUNBURST.