Collection

Data from Local System

1

T1005

Command and Control

Credential Access

Credentials in Files

1

T1081

Defense Evasion

Modify Registry

1

T1112

Install Root Certificate

1

T1130

Discovery

Remote System Discovery

1

T1018

System Information Discovery

3

T1082

Execution

Command-Line Interface

1

T1059

Exfiltration

Impact

Initial Access

Lateral Movement

Persistence

Privilege Escalation