Registry Run Keys / Startup Folder
PowerShell
Hidden Window
System Network Configuration Discovery
System Owner/User Discovery
Rundll32
Modify Registry
Drive-by Compromise
Windows Service
Web Protocols
Command and Scripting Interpreter
Encrypted/Encoded File
Spearphishing Attachment
Malicious File
System Information Discovery
Standard Encoding
Tool
DLL
Regsvr32
Deobfuscate/Decode Files or Information
Command Obfuscation