T1023 - Shortcut Modification, T1045 - Software Packing, T1053 - Scheduled Task/Job, T1055 - Process Injection, T1057 - Process Discovery, T1060 - Registry Run Keys / Startup Folder, T1071.001 - Web Protocols, T1071.004 - DNS, T1071 - Application Layer Protocol, T1083 - File and Directory Discovery, T1089 - Disabling Security Tools, T1105 - Ingress Tool Transfer, T1112 - Modify Registry, T1114.002 - Remote Email Collection, T1129 - Shared Modules, T1158 - Hidden Files and Directories, T1204 - User Execution, T1210 - Exploitation of Remote Services, T1222.002 - Linux and Mac File and Directory Permissions Modification, T1553.002 - Code Signing, T1553 - Subvert Trust Controls, T1566 - Phishing, T1568.002 - Domain Generation Algorithms, T1568 - Dynamic Resolution, T1574.008 - Path Interception by Search Order Hijacking, T1583.001 - Domains, T1583.005 - Botnet, T1583 - Acquire Infrastructure, TA0002 - Execution, TA0003 - Persistence, TA0004 - Privilege Escalation, TA0005 - Defense Evasion, TA0007 - Discovery, TA0011 - Command and Control