DAMP

DAMP (Discretionary ACL Modification Project) is a PowerShell source project for persistence through host-based security-descriptor changes. Its remote-registry component adds an allow ACE for a chosen principal to registry keys used for the machine-account hash, local SAM hashes, and domain cached credentials; companion functions retrieve that material. The upstream project says changing the target security descriptors normally requires local-administrator rights on stock systems.