misp-galaxy:mitre-attack-pattern="Scheduled Task - T1053",misp-galaxy:mitre-attack-pattern="Disabling Security Tools - T1089",misp-galaxy:mitre-attack-pattern="Group Policy Modification - T1484",misp-galaxy:mitre-attack-pattern="Hidden Files and Directories - T1158",misp-galaxy:mitre-attack-pattern="Obfuscated Files or Information - T1027",misp-galaxy:mitre-attack-pattern="Process Injection - T1055",misp-galaxy:mitre-attack-pattern="Rundll32 - T1085",misp-galaxy:mitre-attack-pattern="Scripting - T1064",misp-galaxy:mitre-attack-pattern="Valid Accounts - T1078",misp-galaxy:mitre-attack-pattern="Credential Dumping - T1003",misp-galaxy:mitre-attack-pattern="System Network Connections Discovery - T1049",misp-galaxy:mitre-attack-pattern="System Information Discovery - T1082",misp-galaxy:mitre-attack-pattern="Software Discovery - T1518",misp-galaxy:mitre-attack-pattern="Security Software Discovery - T1063",misp-galaxy:mitre-attack-pattern="Remote System Discovery - T1018",misp-galaxy:mitre-attack-pattern="Process Discovery - T1057",misp-galaxy:mitre-attack-pattern="Network Share Discovery - T1135",misp-galaxy:mitre-attack-pattern="Network Service Scanning - T1046",misp-galaxy:mitre-attack-pattern="Domain Trust Discovery - T1482",misp-galaxy:mitre-attack-pattern="Account Discovery - T1087",misp-galaxy:mitre-attack-pattern="Remote Desktop Protocol - T1076",misp-galaxy:mitre-attack-pattern="Remote File Copy - T1105",misp-galaxy:mitre-attack-pattern="Remote Services - T1021",misp-galaxy:mitre-attack-pattern="Windows Admin Shares - T1077",misp-galaxy:mitre-attack-pattern="Automated Collection - T1119",misp-galaxy:mitre-attack-pattern="Web Service - T1102",misp-galaxy:mitre-attack-pattern="Commonly Used Port - T1043",misp-galaxy:mitre-attack-pattern="Data Encrypted for Impact - T1486",Cobalt Strike,PowerView,Ryuk,tlp:green,trickbot