Post #905 56 Jun 9, 2020, 20:22 UTC Abusing Windows telemetry for persistence https://www.trustedsec.com/blog/abusing-windows-telemetry-for-persistence/ TrustedSec Abusing Windows Telemetry for Persistence When CompatTelRunner.exe runs (current version as of May 2020), it first checks that a few conditions pass before continuing its telemetry quest. After…