Which of the following commands will show programs set to autostart?

schtasks /query lists tasks configured in the Windows Task Scheduler, not programs set to autostart via registry run keys or startup folders.

wevtutil qe security /f:text queries the Windows Security event log for recorded events, not startup program configuration.

Get-EventLog -LogName Security retrieves entries from the Security event log in PowerShell, not a list of programs registered to autostart.

The wmic startup list full command queries the Win32_StartupCommand WMI class, which enumerates all programs registered to autostart via registry run keys, startup folders, and other autorun locations. It returns detailed output including the command path, user context, and source registry key, making it a reliable tool for identifying persistence mechanisms. WMIC consolidates startup entries from multiple sources into a single comprehensive listing.