misp-galaxy:mitre-attack-pattern="External Remote Services - T1133",misp-galaxy:mitre-attack-pattern="Command-Line Interface - T1059",misp-galaxy:mitre-attack-pattern="Execution through API - T1106",misp-galaxy:mitre-attack-pattern="Rundll32 - T1085",misp-galaxy:mitre-attack-pattern="Service Execution - T1035",misp-galaxy:mitre-attack-pattern="User Execution - T1204",misp-galaxy:mitre-attack-pattern="DLL Search Order Hijacking - T1038",misp-galaxy:mitre-attack-pattern="Kernel Modules and Extensions - T1215",misp-galaxy:mitre-attack-pattern="Port Knocking - T1205",misp-galaxy:mitre-attack-pattern="Redundant Access - T1108",misp-galaxy:mitre-attack-pattern="Binary Padding - T1009",misp-galaxy:mitre-attack-pattern="Code Signing - T1116",misp-galaxy:mitre-attack-pattern="Deobfuscate/Decode Files or Information - T1140",misp-galaxy:mitre-attack-pattern="Disabling Security Tools - T1089",misp-galaxy:mitre-attack-pattern="Execution Guardrails - T1480",misp-galaxy:mitre-attack-pattern="File Deletion - T1107",misp-galaxy:mitre-attack-pattern="Modify Registry - T1112",misp-galaxy:mitre-attack-pattern="Process Injection - T1055",misp-galaxy:mitre-attack-pattern="Rootkit - T1014",misp-galaxy:mitre-attack-pattern="Software Packing - T1045",misp-galaxy:mitre-attack-pattern="Timestomp - T1099",misp-galaxy:mitre-attack-pattern="Commonly Used Port - T1043",misp-galaxy:mitre-attack-pattern="Connection Proxy - T1090",misp-galaxy:mitre-attack-pattern="Custom Command and Control Protocol - T1094",misp-galaxy:mitre-attack-pattern="Custom Cryptographic Protocol - T1024",misp-galaxy:mitre-attack-pattern="Fallback Channels - T1008",misp-galaxy:mitre-attack-pattern="Remote Access Tools - T1219",type:OSINT,osint:lifetime="perpetual",osint:certainty="50",tlp:white,misp-galaxy:threat-actor="Axiom"