Indicator Removal from Tools
Search Threat Vendor Data
Hypervisor CLI
File and Directory Discovery
Default Accounts
Compromise Host Software Binary
Exploitation for Privilege Escalation
Virtual Machine Discovery
Ignore Process Interrupts
Malware
Exploitation for Credential Access
ESXi Administration Command
Rundll32
Local Data Staging
Clear Network Connection History and Configurations
Python
Abuse Elevation Control Mechanism
Timestomp
Prevent Command History Logging
Archive via Custom Method
Exploitation for Client Execution
RC Scripts
Disable or Modify Tools
File Deletion
Digital Certificates
Password Managers
Exploits
vSphere Installation Bundles
Archive via Utility
LSASS Memory
Process Discovery
Lateral Tool Transfer
Malware
Windows Command Shell
Masquerade Task or Service
Boot or Logon Initialization Scripts
Rootkit
PowerShell
Network Sniffing
System Time Discovery
Valid Accounts
Port Knocking
Exploit Public-Facing Application
Non-Application Layer Protocol
Disable or Modify System Firewall
Unix Shell
Traffic Signaling
SSH
Fallback Channels