Adversaries may create or modify system-level processes to repeatedly execute malicious payloads as part of persistence. Tactics TA0003 TA0004 Sub-techniques T1543.001 T1543.002 T1543.003 T1543.004 T1543.005 See: MITRE ATT&CK