Windows Service Created Within Public Path
Create or Modify System Process, Windows Service
Create or Modify System Process, Windows Service
Abuse Elevation Control Mechanism
Steal or Forge Authentication Certificates
Kernel Modules and Extensions, Boot or Logon Autostart Execution
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation, Modify Authentication Process, Multi-Factor Authentication