PyrsistenceSniper – Tool that Detects 117 Persistence Malware Techniques on Windows, Linux, and macOS

PyrsistenceSniper is a Python-based forensic triage tool from Hexastrike that identifies 117 persistence mechanisms across Windows, Linux, and macOS by scanning mounted disk images, Velociraptor collections, and KAPE dumps; it offers signature-based filtering, YAML detection profiles, enriched findings (file existence, SHA-256, Authenticode signer, LOLBin classification), multiple output formats (console, CSV, HTML, XLSX), and a Docker container for easy deployment to streamline incident response and threat-hunting workflows.