GetDomainGroup with PowerShell Script Block
Permission Groups Discovery, Domain Groups
Permission Groups Discovery, Domain Groups
Cron, Scheduled Task/Job
Windows Management Instrumentation Event Subscription, Event Triggered Execution
Disable or Modify Tools, Impair Defenses
Steal Application Access Token