Screen Capture
Password Guessing
Automated Collection
Disk Content Wipe
Data Encrypted for Impact
Phishing
Gather Victim Identity Information
Financial Theft
Web Service
PowerShell
Windows Management Instrumentation
Group Policy Modification
Hidden Window
Domains
Audio Capture
Exploit Public-Facing Application
Remote Email Collection
Data Staged
Domain Accounts
Compression
Impersonation
Match Legitimate Resource Name or Location
Selective Exclusion
Domain Account
Malware
Inhibit System Recovery
Software Deployment Tools
LSASS Memory
Cloud Administration Command
Virtual Private Server
Web Services
Windows Host Firewall
Credentials in Registry
Sharepoint
Remote Desktop Software
Vulnerability Scanning
Disk Structure Wipe
Server
Ingress Tool Transfer
System Information Discovery
Cloud Accounts
External Remote Services
Tool
Registry Run Keys / Startup Folder
Malicious File
Data from Local System
Account Manipulation
Video Capture
Protocol Tunneling
Malware
Email Accounts
Web Protocols
Trusted Relationship
Credential Stuffing
Social Media Accounts
Data Destruction
Valid Accounts
Brute Force
Masquerade Task or Service
Python
Archive via Utility
Exfiltration Over C2 Channel
Remote Desktop Protocol