CompTIA PenTest+ (PT0-003) PT0-003 — Question 333

During a red-team operation, a tester gains local administrator access to a Windows workstation. The tester's goal is to maintain long-term access without creating new services or modifying scheduled tasks because the blue team monitors both. The tester decides to automatically launch a payload upon each user login. Which of the following methods best supports this persistence goal?