Disable Defender Enhanced Notification
Disable or Modify Tools, Impair Defenses
Disable or Modify Tools, Impair Defenses
Command and Scripting Interpreter, PowerShell
Scheduled Task, Scheduled Task/Job
Windows Management Instrumentation
Use Alternate Authentication Material, Pass the Ticket, Steal or Forge Kerberos Tickets, Kerberoasting, AS-REP Roasting