SSH Authorized Keys (T1098.004)

Adversaries may modify the SSH authorized_keys file to maintain persistence on a victim host.

Tactics
TA0003 TA0004

Sub-technique of
T1098

---

See: MITRE ATT&CK