misp-galaxy:attack-pattern="Gather Victim Host Information: Software",misp-galaxy:mitre-attack-pattern="Gather Victim Network Information - T1590",misp-galaxy:attack-pattern="Gather Victim Network Information: Network Topology",misp-galaxy:mitre-ics-techniques="Exploit Public-Facing Application",misp-galaxy:cmtmf-attack-pattern="Exploit Public-Facing Application",misp-galaxy:attack-pattern="Command and Scripting Interpreter: PowerShell",misp-galaxy:attack-pattern="Command and Scripting Interpreter: Windows Command Shell",misp-galaxy:mitre-enterprise-attack-course-of-action="Exploitation for Client Execution Mitigation - T1203",misp-galaxy:mitre-course-of-action="Exploitation for Client Execution Mitigation - T1203",misp-galaxy:mitre-enterprise-attack-course-of-action="Windows Management Instrumentation Mitigation - T1047",misp-galaxy:mitre-enterprise-attack-course-of-action="Account Manipulation Mitigation - T1098",misp-galaxy:cmtmf-attack-pattern="Boot or Logon Autostart Execution",misp-galaxy:attack-pattern="Hijack Execution Flow: DLL Side-Loading",misp-galaxy:attack-pattern="Scheduled Task/Job: Scheduled Task",misp-galaxy:attack-pattern="Server Software Component: SQL Stored Procedures",misp-galaxy:mitre-enterprise-attack-course-of-action="Exploitation for Privilege Escalation Mitigation - T1068",misp-galaxy:mitre-course-of-action="Exploitation for Privilege Escalation Mitigation - T1068",misp-galaxy:mitre-attack-pattern="Hide Artifacts - T1628",misp-galaxy:attack-pattern="Hide Artifacts: Hidden Files and Directories",misp-galaxy:attack-pattern="Impair Defenses: Disable or Modify Tools",misp-galaxy:mitre-ics-techniques="Masquerading",misp-galaxy:cmtmf-attack-pattern="Masquerading",misp-galaxy:attack-pattern="Obfuscated Files or Information: Binary Padding",misp-galaxy:cmtmf-attack-pattern="Process Injection",misp-galaxy:attack-pattern="Credentials from Password Stores: Credentials from Web Browsers",misp-galaxy:mitre-attack-pattern="OS Credential Dumping - T1003",misp-galaxy:attack-pattern="OS Credential Dumping: LSASS Memory",misp-galaxy:attack-pattern="OS Credential Dumping: Security Account Manager",misp-galaxy:attack-pattern="Steal or Forge Kerberos Tickets: Golden Ticket",misp-galaxy:mitre-attack-pattern="Network Service Discovery - T1046",misp-galaxy:sigma-rules="Process Discovery",misp-galaxy:cmtmf-attack-pattern="System Network Connections Discovery",misp-galaxy:mitre-enterprise-attack-course-of-action="System Owner/User Discovery Mitigation - T1033",misp-galaxy:mitre-course-of-action="System Owner/User Discovery Mitigation - T1033",misp-galaxy:mitre-ics-techniques="Exploitation of Remote Services",misp-galaxy:mitre-attack-pattern="Dynamic Resolution - T1637",misp-galaxy:mitre-attack-pattern="Protocol Tunneling - T1572",misp-galaxy:cmtmf-attack-pattern="Automated Exfiltration",misp-galaxy:mitre-attack-pattern="Exfiltration Over C2 Channel - T1041",misp-galaxy:mitre-attack-pattern="Exfiltration Over Web Service - T1567",tlp:white