T1037 Boot or Logon Initialization Scripts
Adversaries may use scripts automatically executed at boot or logon initialization to establish persistence. MITRE ATT&CK
Its sub-techniques
T1037.001Boot or Logon Initialization Scripts: Logon Script (Windows)