HAZY TIGER

T1001 T1003 T1005 - Data from Local System T1007 T1008 T1011 T1012 - Query Registry T1016 - System Network Configuration Discovery T1021 - Remote Services T1027 - Obfuscated Files or Information T1027.013 T1033 - System Owner/User Discovery T1036 - Masquerading T1036.004 T1041 - Exfiltration Over C2 Channel T1047 - Windows Management Instrumentation T1048 T1049 T1053 - Scheduled Task/Job T1053.005 - Scheduled Task T1055 T1056.001 T1056.003 - Web Portal Capture T1057 - Process Discovery T1059 - Command and Scripting Interpreter T1059.001 - PowerShell T1059.003 - Windows Command Shell T1059.005 - Visual Basic T1060 T1064 T1068 T1069.002 T1070 T1071 - Application Layer Protocol T1071.001 - Web Protocols T1078 - Valid Accounts T1081 T1082 - System Information Discovery T1083 - File and Directory Discovery T1085 T1087 T1090 - Proxy T1095 T1102 - Web Service T1105 - Ingress Tool Transfer T1106 T1110 T1112 T1113 - Screen Capture T1114 T1114.001 T1115 T1119 T1120 T1124 T1127 - Trusted Developer Utilities Proxy Execution T1129 T1130 T1132 T1132.001 - Standard Encoding T1133 T1136 T1137 - Office Application Startup T1140 - Deobfuscate/Decode Files or Information T1170 T1176 T1190 T1193 T1199 - Trusted Relationship T1203 T1204 - User Execution T1204.001 - Malicious Link T1204.002 - Malicious File T1213.003 T1217 T1218 - Signed Binary Proxy Execution T1221 T1485 T1486 T1489 T1490 - Inhibit System Recovery T1497 T1497.003 T1498 - Network Denial of Service T1503 T1518 T1529 T1530 T1531 T1539 T1543 T1547 - Boot or Logon Autostart Execution T1550 T1552 T1553 - Subvert Trust Controls T1555 T1559 T1559.002 T1560 T1561 T1562 - Impair Defenses T1562.001 T1564 - Hide Artifacts T1566 - Phishing T1566.001 - Spearphishing Attachment T1566.002 - Spearphishing Link T1568 T1569 - System Services T1571 T1573 T1573.001 - Symmetric Cryptography T1574 T1574.002 - DLL Side-Loading T1583 T1583.001 - Domains T1587 T1588 T1588.002 T1589.002 - Email Addresses T1595 T1608 T1608.001