> For the complete documentation index, see [llms.txt](https://red.infiltr8.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://red.infiltr8.io/redteam/persistence.md).

# Persistence

## Theory

Persistence consists of techniques used to keep access to systems across restarts, changed credentials, and other interruptions that could cut off our access. Techniques used for persistence include any access, action, or configuration changes that let us maintain our foothold on systems, such as replacing or hijacking legitimate code or adding startup code.

<figure><img src="/files/FNiCykG30k371VHOdwj7" alt=""><figcaption></figcaption></figure>

## Resources

{% embed url="<https://attack.mitre.org/tactics/TA0003/>" %}

{% embed url="<https://www.unifiedkillchain.com/#thescience>" %}