Office Product Spawning Windows Script Host
Phishing, Spearphishing Attachment
Phishing, Spearphishing Attachment
Windows Management Instrumentation Event Subscription, Event Triggered Execution
Remote Services, Windows Remote Management
Archive via Utility, Archive Collected Data
Modify Registry, Bypass User Account Control, Abuse Elevation Control Mechanism