DNS Exfiltration Using Nslookup App

Exfiltration Over Alternative Protocol

Deleting Of Net Users

Account Access Removal

Abnormally High AWS Instances Terminated by User - MLTK

Cloud Accounts

Kubernetes Azure detect sensitive object access

Rundll32 Control RunDLL World Writable Directory

System Binary Proxy Execution, Rundll32