Excel Spawning Windows Script Host
Security Account Manager, OS Credential Dumping
Security Account Manager, OS Credential Dumping
Data Encrypted for Impact
NTDS, OS Credential Dumping
Windows Command Shell, Command and Scripting Interpreter
DCSync, OS Credential Dumping