During a red team engagement, you have gained a low-privileged foothold on a Windows 10 workstation via a compromised standard domain user account. You cannot write to system directories or create services because you lack administrative rights, but you need to maintain access that survives reboots and user logoffs. Which technique will most reliably establish persistence given your current privilege level?