keyboardcrunch-sentinelone-attack-queries/Execution.md

Execution

T1053.002 At (Windows)

Atomics: T1053.002

T1559.002 Dynamic Data Exchange

Atomics: T1559.002

T1204.002 Malicious File

Atomics: T1204.002

T1106 Native API

Atomics: T1106

T1059.001 PowerShell

Atomics: T1059.001

T1053.005 Scheduled Task

Atomics: T1053.005

T1569.002 Service Execution

Atomics: T1569.002

T1059.005 Visual Basic

Atomics: T1059.005

T1059.003 Windows Command Shell

Atomics: T1059.003

T1047 Windows Management Instrumentation

Atomics: T1047