systemd persistence
Named by 2 kept items in this workspace.
Search every workspace for systemd persistence. It matches the name as written, so it can find other things that share it.
The items that name it 2
Malicious systemd services configured with Restart=always
Writing and enabling a systemd unit to persist a fetched payload.
All techniques in this workspace.