Techniques
16 techniques T1555 Credentials from Password Stores T1059.001 PowerShell T1204 User Execution T1082 System Information Discovery T1566.002 Spearphishing Link T1685 Disable or Modify Tools T1555.003 Credentials from Web Browsers T1112 Modify Registry T1560 Archive Collected Data T1105 Ingress Tool Transfer T1057 Process Discovery T1016 System Network Configuration Discovery T1113 Screen Capture T1059 Command and Scripting Interpreter T1005 Data from Local System T1539 Steal Web Session Cookie