Domain Accounts
Remote System Discovery
Registry Run Keys / Startup Folder
Security Software Discovery
Network Service Discovery
Windows Management Instrumentation
Add-ins
System Network Configuration Discovery
Match Legitimate Resource Name or Location
Spearphishing Attachment
Masquerade Task or Service
Scheduled Task
Malicious File
DLL