misp-galaxy:mitre-attack-pattern="Group Policy Modification - T1484.001",misp-galaxy:mitre-attack-pattern="Clear Windows Event Logs - T1070.001",tlp:white,dhs-ciip-sectors:DHS-critical-sectors="transport"