 Several adversarial techniques were observed in this activity and the following measures are suggested within Palo Alto Networks products and services to ensure mitigation of threats related to LockBit 2.0 ransomware, as well as other malware using similar techniques:  Exploit Public-Facing Application [T1190], Command and Scripting Interpreter [T1059], Local Account [T1136.001], Web Shell [T1505.003], Exploitation for Privilege Escalation [T1068], Indicator Removal on Host [T1070], Deobfuscate/Decode Files or Information [T1140], Disable or Modify Tools [T1562.001], Hidden Window [T1564.003], Valid Accounts [T1078], External Remote Services [T1133], Scheduled Task [T1053.005], Bypass User Account Control [T1548.002], Group Policy Modification [T1484.001]  OS Credential Dumping [T1003], Credentials from Password Stores [T1555]  Network Service Scanning [T1046], Process Discovery [T1057], System Location Discovery [T1614], System Information Discovery [T1082]  Remote Services [T1021], SMB/Windows Admin Shares [T1021.002]  Remote Access Software [T1219]  Data Transfer Size Limits [T1030], Exfiltration Over C2 Channel [T1041]  Data Encrypted for Impact [T1486], Service Stop [T1489]  †These capabilities are part of the NGFW security subscriptions service