Persistence and Command and Control Questions

Understanding mechanisms attackers use to maintain access after compromise (scheduled tasks, registry modifications, service installation, backdoors) and how they maintain command and control channels (C2 infrastructure, reverse shells, encrypted communication). Understanding this in authorized test contexts only.