MITRE
- T1049 System Network Connection Discovery Program
- T1542.003 Bootkit
- T1069 Permission Group Discovery Program
- T1070.003 Clear Command History
- T1018 Remote System Discovery Policy
- T1055 Process Injection-File
- T1136 Create Account-File
- T1136 Create Account-Program
- T1059 Command and Scripting Interpreter
- T1082 System Information Discovery- Program Blacklist
- T1053 Local Job Scheduling-File Write
- T1546.004 Bash Profile And Bashrc
- T1553.004 Install Root Certificate
- T1027.004 Compile After Delivery
- T1016 System Network Configuration Discovery-Program Blacklist
- T1046 Network Service Scanning
- T1040 Network Sniffing
- T1036.006 Space After Filename
- T1057 Process Discovery- Program Blacklist
- T1548.003 Sudo
- T1204 User Execution