Windows Service Creation on Remote Endpoint
Create or Modify System Process, Windows Service
Create or Modify System Process, Windows Service
Ingress Tool Transfer
Create or Modify System Process, Windows Service
Use Alternate Authentication Material, Pass the Hash
Match Legitimate Name or Location, Masquerading, OS Credential Dumping, Active Scanning