GetWmiObject Ds Group with PowerShell Script Block
Permission Groups Discovery, Domain Groups
Permission Groups Discovery, Domain Groups
Remote System Discovery
Obfuscated Files or Information, Indicator Removal from Tools, PowerShell
Inhibit System Recovery
Remote System Discovery