Metasploit has had persistence for a long time, however it's always been lackluster. In July 2025 a complete overhaul of the persistence system began, introducing standardization across all platforms. Since then many new additional techniques have been created, especially on Windows platforms. This talk will discuss the new standardizations and how they effect users, look at the new techniques which have been added, and show how they can be utilized with live demonstrations.
Are you a blue teamer? Comes see what the other side is doing and know what to look for in your logs to find these techniques.