# a) Add malicious startup/logon script via GPO → executes on boot/login # b) Deploy malicious scheduled task via GPO → executes on all targets ...