GOLD REBELLION

T1021 - Remote Services T1027 - Obfuscated Files or Information T1059 - Command and Scripting Interpreter T1068 - Exploitation for Privilege Escalation T1071 - Application Layer Protocol T1083 - File and Directory Discovery T1486 - Data Encrypted for Impact T1547 - Boot or Logon Autostart Execution T1566.001 - Spearphishing Attachment T1566.002 - Spearphishing Link TA0001 - Initial Access TA0002 - Execution TA0003 - Persistence TA0004 - Privilege Escalation TA0005 - Defense Evasion TA0007 - Discovery TA0008 - Lateral Movement TA0011 - Command and Control TA0040 - Impact