misp-galaxy:mitre-attack-pattern="Spearphishing Attachment - T1193",misp-galaxy:mitre-attack-pattern="Spearphishing Link - T1192",misp-galaxy:mitre-attack-pattern="Trusted Relationship - T1199",misp-galaxy:mitre-attack-pattern="Command-Line Interface - T1059",misp-galaxy:mitre-attack-pattern="Execution through API - T1106",misp-galaxy:mitre-attack-pattern="Execution through Module Load - T1129",misp-galaxy:mitre-attack-pattern="Exploitation for Client Execution - T1203",misp-galaxy:mitre-attack-pattern="PowerShell - T1086",misp-galaxy:mitre-attack-pattern="Rundll32 - T1085",misp-galaxy:mitre-attack-pattern="Scheduled Task - T1053",misp-galaxy:mitre-attack-pattern="Scripting - T1064",misp-galaxy:mitre-attack-pattern="Service Execution - T1035",misp-galaxy:mitre-attack-pattern="User Execution - T1204",misp-galaxy:mitre-attack-pattern="Windows Management Instrumentation - T1047",misp-galaxy:mitre-attack-pattern="Account Manipulation - T1098",misp-galaxy:mitre-attack-pattern="New Service - T1050",misp-galaxy:mitre-attack-pattern="Registry Run Keys / Startup Folder - T1060",misp-galaxy:mitre-attack-pattern="Startup Items - T1165",misp-galaxy:mitre-attack-pattern="Windows Management Instrumentation Event Subscription - T1084",misp-galaxy:mitre-attack-pattern="Bypass User Account Control - T1088",misp-galaxy:mitre-attack-pattern="Code Signing - T1116",misp-galaxy:mitre-attack-pattern="Disabling Security Tools - T1089",misp-galaxy:mitre-attack-pattern="DLL Side-Loading - T1073",misp-galaxy:mitre-attack-pattern="Exploitation for Defense Evasion - T1211",misp-galaxy:mitre-attack-pattern="Hidden Window - T1143",misp-galaxy:mitre-attack-pattern="Modify Registry - T1112",misp-galaxy:mitre-attack-pattern="Obfuscated Files or Information - T1027",misp-galaxy:mitre-attack-pattern="Software Packing - T1045",misp-galaxy:mitre-attack-pattern="Virtualization/Sandbox Evasion - T1497",misp-galaxy:mitre-attack-pattern="Input Capture - T1056",misp-galaxy:mitre-attack-pattern="Input Prompt - T1141",misp-galaxy:mitre-attack-pattern="Account Discovery - T1087",misp-galaxy:mitre-attack-pattern="File and Directory Discovery - T1083",misp-galaxy:mitre-attack-pattern="Network Service Scanning - T1046",misp-galaxy:mitre-attack-pattern="Network Share Discovery - T1135",misp-galaxy:mitre-attack-pattern="Permission Groups Discovery - T1069",misp-galaxy:mitre-attack-pattern="Process Discovery - T1057",misp-galaxy:mitre-attack-pattern="Query Registry - T1012",misp-galaxy:mitre-attack-pattern="Remote System Discovery - T1018",misp-galaxy:mitre-attack-pattern="Security Software Discovery - T1063",misp-galaxy:mitre-attack-pattern="System Information Discovery - T1082",misp-galaxy:mitre-attack-pattern="System Network Configuration Discovery - T1016",misp-galaxy:mitre-attack-pattern="System Network Connections Discovery - T1049",misp-galaxy:mitre-attack-pattern="System Owner/User Discovery - T1033",misp-galaxy:mitre-attack-pattern="System Service Discovery - T1007",misp-galaxy:mitre-attack-pattern="Remote Desktop Protocol - T1076",misp-galaxy:mitre-attack-pattern="Remote Services - T1021",misp-galaxy:mitre-attack-pattern="Automated Collection - T1119",misp-galaxy:mitre-attack-pattern="Data from Local System - T1005",misp-galaxy:mitre-attack-pattern="Email Collection - T1114",misp-galaxy:mitre-attack-pattern="Commonly Used Port - T1043",misp-galaxy:mitre-attack-pattern="Custom Command and Control Protocol - T1094",misp-galaxy:mitre-attack-pattern="Custom Cryptographic Protocol - T1024",misp-galaxy:mitre-attack-pattern="Data Encoding - T1132",misp-galaxy:mitre-attack-pattern="Remote Access Tools - T1219",misp-galaxy:mitre-attack-pattern="Standard Application Layer Protocol - T1071",misp-galaxy:mitre-attack-pattern="Standard Cryptographic Protocol - T1032",misp-galaxy:mitre-attack-pattern="Automated Exfiltration - T1020",misp-galaxy:mitre-attack-pattern="Data Compressed - T1002",misp-galaxy:mitre-attack-pattern="Exfiltration Over Alternative Protocol - T1048",misp-galaxy:mitre-attack-pattern="Exfiltration Over Command and Control Channel - T1041",misp-galaxy:mitre-attack-pattern="Data Encrypted for Impact - T1486",type:OSINT,osint:lifetime="perpetual",osint:certainty="50",tlp:white,misp-galaxy:threat-actor="SectorJ04",misp-galaxy:threat-actor="TA505"