Author: Ruian Ding

ATT&CK for Enterprise – TA0010 Exfiltration

ATT&CK for Enterprise – TA0002 Execution

ATT&CK for Enterprise – TA0005 Defense Evasion

Network File Sharing Protocol – Server Message Block (SMB)

ATT&CK for Enterprise – TA0008 Lateral movement

ATT&CK for Enterprise – TA0006 Credential Access

Authentication Protocols – Kerberos

A Guide to Log Files – Microsoft Entra (Azure AD) Connect Health

A Guide to Log Files – Microsoft Entra (Azure AD) Kerberos Server Object

Internet Protocols – Transport Layer Security (TLS)