Disable Registry Tool

Disable or Modify Tools, Impair Defenses, Modify Registry

Detect GCP Storage access from a new IP

Data from Cloud Storage

Linux Preload Hijack Library Calls

Dynamic Linker Hijacking, Hijack Execution Flow

Cloud Compute Instance Created With Previously Unseen Instance Type

Windows Proxy Via Netsh

Internal Proxy, Proxy