GPUpdate with no Command Line Arguments with Network
Process Injection
Recent Posts
Kerberos User Enumeration
Gather Victim Identity Information, Email Addresses
Unknown Process Using The Kerberos Protocol
Use Alternate Authentication Material
Suspicious msbuild path
Masquerading, Trusted Developer Utilities Proxy Execution, Rename System Utilities, MSBuild
MacOS LOLbin
Unix Shell, Command and Scripting Interpreter