TA0001 1
Initial Access
T1566.001Phishing: Spear phishing Attachment
TA0002 3
Execution
T1047Windows Management Instrumentation
T1059.001Command and Scripting Interpreter: PowerShell
T1569.002System Services: Service Execution
TA0003 4
Persistence
T1098Account Manipulation
T1136Create Account
T1543.003Create or Modify System Process: Windows Service
T1574.001Hijack Execution Flow: DLL Search Order Hijacking
TA0004 3
Privilege Escalation
T1484.001Domain Policy Modification: Group Policy Modification
T1543.003Create or Modify System Process: Windows Service
T1574.001Hijack Execution Flow: DLL Search Order Hijacking
TA0006 0
Credential Access
TA0011 0
Command & Control