value:  Russian threat actors deploy a variety of techniques to achieve persistence, sometimes involving the abuse of port monitors to execute arbitrary code during the boot process. 
name: Boot or Logon Autostart Execution: Port Monitors