Microsoft Windows AutoRuns Logon

info Nessus Plugin ID 70621


Report programs that start-up from the most common registry locations.


Report the most common startup locations used by programs. These are commonly associated with programs that start automatically when the computer is turned on, users log in, users log off, or remote sessions are started.

Such keys can be set from a program install, GPO, or through a malicious process to maintain persistence.

See Also

Plugin Details

Severity: Info

ID: 70621

File Name: windows_autoruns_logon.nbin

Version: 1.261

Type: local

Agent: windows

Family: Windows

Published: 10/25/2013

Updated: 2/22/2024

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated, war/setup/ran