T1112 - Defense Evasion - Modify Registry,
T1059.001 - Execution - Command and Scripting Interpreter: PowerShell,
T1110 - Credential Access - Brute Force,
T1133 - Initial Access - External Remote Services,
T1136 - Persistence - Create Account,
T1059.003 - Execution - Command and Scripting Interpreter: Windows Command Shell,
T1556.008 - Persistence - Modify Authentication Process: Network Provider DLL,
T1098 - Privilege Escalation - Account Manipulation,