Techniques
10 techniques T1059.003 Windows Command Shell T1685 Disable or Modify Tools T1071 Application Layer Protocol T1140 Deobfuscate/Decode Files or Information T1620 Reflective Code Loading T1547.001 Registry Run Keys / Startup Folder T1059.005 Visual Basic T1059.001 PowerShell T1685.005 Clear Windows Event Logs T1027 Obfuscated Files or Information