Robuta

https://attack.mitre.org/techniques/T1547/005/ Boot or Logon Autostart Execution: Security Support Provider, Sub-technique T1547.005 - Enterprise... security support provider boot logon autostart execution