Penghindaran Pertahanan- T1548.002: Bypass User Account Control
Akses Kredensial
- T1539: Steal Web Session Cookies
- T1555.003: Credentials from Web Browsers
- T1552.001: Credentials in Files
Penemuan- T1012: Query Registry
- T1082: System Information Discovery
- T1518: Software Discovery
Dampak
- T1486: Data Encryption for Impact