From d46e0b7d78d686c25f4aadc4d47af35708a2b777 Mon Sep 17 00:00:00 2001 From: Andreas Hunkeler Date: Tue, 8 Jul 2025 12:43:10 +0200 Subject: [PATCH 1/2] Add Database Triggers as Persistence Mechanisms #19 --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 2261bfa..5d7446d 100644 --- a/README.md +++ b/README.md @@ -86,6 +86,10 @@ _Persistence techniques and detection._ * [MoonBounce: the dark side of UEFI firmware](https://securelist.com/moonbounce-the-dark-side-of-uefi-firmware/105468) - An in-depth write up about one particular UEFI bootkit. +### Databases + +* [Database Triggers as Persistence Mechanisms](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-attack-vector-database-triggers-as-persistence-mechanisms/) - An in-depth write up about database triggers providing persistence. + ## Persistence Removal _Tools and commands for persistence mechanisms removal. Beside the tools mentioned below, use standard OS commands to remove the persistence._ From a1fc88ba0fdf6a0e379e8668fafbdde1c7e00e4f Mon Sep 17 00:00:00 2001 From: Andreas Hunkeler Date: Tue, 8 Jul 2025 12:44:56 +0200 Subject: [PATCH 2/2] docs: fix missing toc entry for new database category --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 5d7446d..7eef432 100644 --- a/README.md +++ b/README.md @@ -15,6 +15,7 @@ Malware persistence consists of techniques that adversaries use to keep access t * [Windows](#windows) * [Cloud](#cloud) * [Firmware](#firmware) + * [Databases](#databases) * [Persistence Removal](#persistence-removal) * [Generic](#generic-1) * [Windows](#windows-1)