Cato Networks tracked Poisson using OpenSSH and Tailscale to maintain access after Havoc C2 outage in a 33-day intrusion.
All this is assuming you can still boot into Windows 11/10 in a regular way. If you cannot, the only way is to use a bootable USB drive. You can then use the advanced recovery. Reset Windows Format ...