 Exploit Public-Facing Application [T1190], Spearphishing Attachment [T1566.001]  Windows Command Shell [T1059.003], Native API [T1106]  Deobfuscate/Decode Files or Information [T1140], Obfuscated Files or Information [T1027], Dynamic-link Library Injection [T1055.001]  File and Directory Discovery [T1083], Network Share Discovery [T1135], Process Discovery [T1057], System Network Configuration Discovery [T1016], System Network Connections Discovery [T1049]  SMB/Windows Admin Shares [T1021.002], Taint Shared Content [T1080]  Data Encrypted for Impact [T1486], Inhibit System Recovery [T1490], Service Stop [T1489]  Table 1.