An adversary creates a scheduled task that runs their payload at every boot. Which ATT&CK tactic does this…

Question

An adversary creates a scheduled task that runs their payload at every boot. Which ATT&CK tactic does this serve?

Accepted Answer

B. Persistence — Scheduled tasks and startup items survive reboot and blend into ordinary administration, which is why they are classic persistence.

Answer

Exfiltration

Answer

Initial Access

Answer

Discovery