TA0003 1
Persistence
T1547.001Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder
TA0004 2
Privilege Escalation
T1543Create or Modify System Process
T1548.002Abuse Elevation Control Mechanism: Bypass User Account Control
TA0005 3
Defense Evasion
T1070.006Indicator Removal: Timestomp
T1140Deobfuscate/Decode Files or Information
T1562.001Impair Defenses: Disable or Modify Tools
TA0006 0
Credential Access
TA0007 5
Discovery
T1012Query Registry
T1057Process Discovery
T1083File and Directory Discovery
T1087Account Discovery
T1497Virtualization/Sandbox Evasion
TA0009 2
Collection
T1056Input Capture
T1074Data Staged
TA0011 0
Command & Control
TA0040 2
Impact
T1489Service Stop
T1490Inhibit System Recovery