Suspicious Event Log Service Behavior
Indicator Removal, Clear Windows Event Logs
Indicator Removal, Clear Windows Event Logs
Windows Management Instrumentation
Remote Email Collection, Email Collection, Account Manipulation, Additional Cloud Roles
Msiexec, System Binary Proxy Execution
Masquerade Task or Service, Masquerading