ETW Registry Disabled
Indicator Blocking, Trusted Developer Utilities Proxy Execution, Impair Defenses
Indicator Blocking, Trusted Developer Utilities Proxy Execution, Impair Defenses
Modify Registry
Security Account Manager, OS Credential Dumping
Password Policy Discovery
Disable or Modify Tools, Impair Defenses