Change Default File AssociationScreensaverWindows Management Instrumentation Event Subscription.bash_profile and .bashrcTrapLC_LOAD_DYLIB AdditionNetsh Helper DLLAccessibility FeaturesAppCert DLLsAppInit DLLsApplication ShimmingImage File Execution Options InjectionPowerShell ProfileEmondComponent Object Model Hijacking
subClassOf
attack-id
type
label
Event Triggered Execution