name: Custom.Windows.Sysinternals.Autoruns2 description: | Uses Sysinternals autoruns to scan the host. Note this requires syncing the sysinternals binary from the host. precondition: SELECT OS From info() where OS = 'windows' parameters: …