Boot or Logon Initialization Scripts (T1037)

Adversaries may use scripts automatically executed at boot or logon initialization to establish persistence.

Tactics
TA0003 TA0004

Sub-techniques
T1037.001 T1037.002 T1037.003 T1037.004 T1037.005

See: MITRE ATT&CK