{ "version": "1.0", "truncation": null, "padding": null, "added_tokens": [ { "id": 0, "content": "<|endoftext|>", "single_word": false, "lstrip": false, "rstrip": false, "normalized": true, "special": true } ], "normalizer": null, "pre_tokenizer": { "type": "ByteLevel", "add_prefix_space": false, "trim_offsets": true, "use_regex": true }, "post_processor": { "type": "ByteLevel", "add_prefix_space": true, "trim_offsets": false, "use_regex": true }, "decoder": { "type": "ByteLevel", "add_prefix_space": true, "trim_offsets": true, "use_regex": true }, "model": { "type": "BPE", "dropout": null, "unk_token": null, "continuing_subword_prefix": "", "end_of_word_suffix": "", "fuse_unk": false, "byte_fallback": false, "vocab": { "<|endoftext|>": 0, "!": 1, "\"": 2, "#": 3, "$": 4, "%": 5, "&": 6, "'": 7, "(": 8, ")": 9, "*": 10, "+": 11, ",": 12, "-": 13, ".": 14, "/": 15, "0": 16, "1": 17, "2": 18, "3": 19, "4": 20, "5": 21, "6": 22, "7": 23, "8": 24, "9": 25, ":": 26, ";": 27, "<": 28, "=": 29, ">": 30, "?": 31, "@": 32, "A": 33, "B": 34, "C": 35, "D": 36, "E": 37, "F": 38, "G": 39, "H": 40, "I": 41, "J": 42, "K": 43, "L": 44, "M": 45, "N": 46, "O": 47, "P": 48, "Q": 49, "R": 50, "S": 51, "T": 52, "U": 53, "V": 54, "W": 55, "X": 56, "Y": 57, "Z": 58, "[": 59, "\\": 60, "]": 61, "^": 62, "_": 63, "`": 64, "a": 65, "b": 66, "c": 67, "d": 68, "e": 69, "f": 70, "g": 71, "h": 72, "i": 73, "j": 74, "k": 75, "l": 76, "m": 77, "n": 78, "o": 79, "p": 80, "q": 81, "r": 82, "s": 83, "t": 84, "u": 85, "v": 86, "w": 87, "x": 88, "y": 89, "z": 90, "{": 91, "|": 92, "}": 93, "~": 94, "¡": 95, "¢": 96, "£": 97, "¤": 98, "¥": 99, "¦": 100, "§": 101, "¨": 102, "©": 103, "ª": 104, "«": 105, "¬": 106, "®": 107, "¯": 108, "°": 109, "±": 110, "²": 111, "³": 112, "´": 113, "µ": 114, "¶": 115, "·": 116, "¸": 117, "¹": 118, "º": 119, "»": 120, "¼": 121, "½": 122, "¾": 123, "¿": 124, "À": 125, "Á": 126, "Â": 127, "Ã": 128, "Ä": 129, "Å": 130, "Æ": 131, "Ç": 132, "È": 133, "É": 134, "Ê": 135, "Ë": 136, "Ì": 137, "Í": 138, "Î": 139, "Ï": 140, "Ð": 141, "Ñ": 142, "Ò": 143, "Ó": 144, "Ô": 145, "Õ": 146, "Ö": 147, "×": 148, "Ø": 149, "Ù": 150, "Ú": 151, "Û": 152, "Ü": 153, "Ý": 154, "Þ": 155, "ß": 156, "à": 157, "á": 158, "â": 159, "ã": 160, "ä": 161, "å": 162, "æ": 163, "ç": 164, "è": 165, "é": 166, "ê": 167, "ë": 168, "ì": 169, "í": 170, "î": 171, "ï": 172, "ð": 173, "ñ": 174, "ò": 175, "ó": 176, "ô": 177, "õ": 178, "ö": 179, "÷": 180, "ø": 181, "ù": 182, "ú": 183, "û": 184, "ü": 185, "ý": 186, "þ": 187, "ÿ": 188, "Ā": 189, "ā": 190, "Ă": 191, "ă": 192, "Ą": 193, "ą": 194, "Ć": 195, "ć": 196, "Ĉ": 197, "ĉ": 198, "Ċ": 199, "ċ": 200, "Č": 201, "č": 202, "Ď": 203, "ď": 204, "Đ": 205, "đ": 206, "Ē": 207, "ē": 208, "Ĕ": 209, "ĕ": 210, "Ė": 211, "ė": 212, "Ę": 213, "ę": 214, "Ě": 215, "ě": 216, "Ĝ": 217, "ĝ": 218, "Ğ": 219, "ğ": 220, "Ġ": 221, "ġ": 222, "Ģ": 223, "ģ": 224, "Ĥ": 225, "ĥ": 226, "Ħ": 227, "ħ": 228, "Ĩ": 229, "ĩ": 230, "Ī": 231, "ī": 232, "Ĭ": 233, "ĭ": 234, "Į": 235, "į": 236, "İ": 237, "ı": 238, "IJ": 239, "ij": 240, "Ĵ": 241, "ĵ": 242, "Ķ": 243, "ķ": 244, "ĸ": 245, "Ĺ": 246, "ĺ": 247, "Ļ": 248, "ļ": 249, "Ľ": 250, "ľ": 251, "Ŀ": 252, "ŀ": 253, "Ł": 254, "ł": 255, "Ń": 256, "Ġt": 257, "in": 258, "Ġa": 259, "er": 260, "on": 261, "he": 262, "es": 263, "Ġs": 264, "re": 265, "te": 266, "is": 267, "ti": 268, "Ġthe": 269, "Ġc": 270, "or": 271, "ll": 272, "le": 273, "Ġf": 274, "Ġw": 275, "ec": 276, "nd": 277, "om": 278, "Ġto": 279, "ing": 280, "ex": 281, "Ġp": 282, "it": 283, "tion": 284, "us": 285, "Ġd": 286, "en": 287, "ow": 288, "Ġb": 289, "ma": 290, "ic": 291, "ed": 292, "at": 293, "Ġus": 294, "ro": 295, "Ġin": 296, "ecu": 297, "Ġex": 298, "ar": 299, "Ġo": 300, "as": 301, "lo": 302, "ĠA": 303, "Ġand": 304, "et": 305, "un": 306, "ĠS": 307, "al": 308, "ess": 309, "ĠC": 310, "Ġexecu": 311, "ĠT": 312, "ile": 313, "ut": 314, "ĠP": 315, "ill": 316, "ĠD": 317, "ta": 318, "ers": 319, "his": 320, "Ġv": 321, "ul": 322, "Ġwill": 323, "Ġof": 324, "ith": 325, "an": 326, "ate": 327, "Ġn": 328, "od": 329, "cess": 330, "Ġre": 331, "Ġ-": 332, "ĠU": 333, "Ġbe": 334, "Ġwith": 335, "est": 336, "ad": 337, "ri": 338, "Win": 339, "Ġcom": 340, "Ġfile": 341, "tem": 342, "Ġma": 343, "hell": 344, "ys": 345, "ĠE": 346, "Ġis": 347, "pt": 348, "il": 349, "Ġm": 350, "ation": 351, "ist": 352, "Ġon": 353, "Ġlo": 354, "ows": 355, "ck": 356, "Ġ(": 357, "Ġr": 358, "Ġexecution": 359, "exe": 360, "ĠR": 361, "mand": 362, "Ġusing": 363, "ol": 364, "ver": 365, "ia": 366, "Ġfor": 367, "ass": 368, "if": 369, "dows": 370, "Ġth": 371, "ur": 372, "um": 373, "ent": 374, "am": 375, "ĠWin": 376, "rom": 377, "ystem": 378, "Ġtest": 379, "co": 380, "pon": 381, "pl": 382, "ĠM": 383, "ĠThis": 384, "Ġsu": 385, "ĠI": 386, "ct": 387, "Ġl": 388, "ble": 389, "wor": 390, "ccess": 391, "ĠL": 392, "Ġcommand": 393, "qu": 394, "ce": 395, "Ġcon": 396, "Ġpro": 397, "ve": 398, "Ġan": 399, "im": 400, "Ġvia": 401, "ain": 402, "ch": 403, "Ġh": 404, "ot": 405, "ire": 406, "ge": 407, "ted": 408, "ory": 409, "Ġby": 410, "Ġuser": 411, "ĠF": 412, "den": 413, "ew": 414, "ote": 415, "ry": 416, "Ġad": 417, "ower": 418, "Ġthat": 419, "em": 420, "up": 421, "Ġdis": 422, "word": 423, "Ġor": 424, "assword": 425, "ĠWindows": 426, "ir": 427, "Ġit": 428, "ay": 429, "omain": 430, "Ġfrom": 431, "Ġat": 432, "erv": 433, "ĠEx": 434, "ke": 435, "Ġas": 436, "ice": 437, "Ġrun": 438, "Ġcre": 439, "Ġ\"": 440, "til": 441, "Ġde": 442, "st": 443, "ary": 444, "ccessf": 445, "ĠPower": 446, "denti": 447, "ter": 448, "Ġlog": 449, "ĠH": 450, "sta": 451, ").": 452, "all": 453, "Ġsystem": 454, "op": 455, "ity": 456, "own": 457, "load": 458, "are": 459, "cri": 460, "ion": 461, "ĠG": 462, "Ġg": 463, "Ġsuccessf": 464, "gist": 465, "able": 466, "Ġst": 467, "id": 468, "Shell": 469, "ction": 470, "Ġen": 471, "cript": 472, "min": 473, "unt": 474, "wn": 475, "ervice": 476, "Ġpassword": 477, "ĠUs": 478, "ly": 479, "Ġmod": 480, "Ġu": 481, "Ġsuccessful": 482, "ig": 483, "cal": 484, "of": 485, "Ġthis": 486, "ata": 487, "stall": 488, "put": 489, "Ġe": 490, "count": 491, "gistry": 492, "Ġac": 493, "out": 494, "ĠUpon": 495, "ĠPowerShell": 496, "Upon": 497, "vers": 498, "ĠB": 499, "ip": 500, "ĠDis": 501, "che": 502, "for": 503, "Ġcan": 504, "ĠCre": 505, "ts": 506, "ech": 507, "play": 508, "ure": 509, "ĠV": 510, "Ġdomain": 511, "cover": 512, "irect": 513, "Ġdisplay": 514, "tes": 515, "ĠN": 516, "iles": 517, "ates": 518, "ack": 519, "ĠAd": 520, "ies": 521, "ĠIn": 522, "der": 523, "ĠO": 524, "Ġsp": 525, "Ġwh": 526, "Ġmay": 527, "ten": 528, "ify": 529, "ting": 530, "Ġsh": 531, "md": 532, "ĠThe": 533, "ĠExecu": 534, "owers": 535, "ated": 536, "inu": 537, "dential": 538, "oft": 539, "irectory": 540, "ule": 541, "ware": 542, "owershell": 543, "Ġutil": 544, "ost": 545, "Ġexecute": 546, "inux": 547, "ou": 548, "Ġprocess": 549, "ownload": 550, "Ġ/": 551, "ĠW": 552, "ĠRe": 553, "Ġaccount": 554, "iz": 555, "ine": 556, "Ġrem": 557, "tive": 558, "tain": 559, "ication": 560, "Pwn": 561, "ous": 562, "Ġset": 563, "Ġch": 564, "art": 565, "ĠDe": 566, "Ġnew": 567, "Ġadvers": 568, "Ġdisplayed": 569, "Ġfiles": 570, "covery": 571, "iqu": 572, "niqu": 573, "ump": 574, "Ġtech": 575, "ree": 576, "ode": 577, "Ġtechniqu": 578, "Ġ`": 579, "tr": 580, "Ġused": 581, "Ġdata": 582, "per": 583, "older": 584, "Ġremote": 585, "Ġse": 586, "Ġscript": 587, "umer": 588, "ĠLo": 589, "Ġregistry": 590, "Ġtechnique": 591, "nt": 592, "tro": 593, "iew": 594, "ud": 595, "bl": 596, "ple": 597, "to": 598, "Ġservice": 599, "Ġcmd": 600, "ort": 601, "olic": 602, "ĠDiscovery": 603, "age": 604, "ull": 605, "Ġy": 606, "ment": 607, "omic": 608, "Ġmal": 609, "Ex": 610, "pen": 611, "Ġthen": 612, "ash": 613, "Ġadversary": 614, "OS": 615, "ĠK": 616, "roup": 617, "Ġinstall": 618, "Ġout": 619, "ious": 620, "oll": 621, "th": 622, "Ġall": 623, "ĠAn": 624, "forma": 625, "Ġlocal": 626, "dentials": 627, "BS": 628, "formation": 629, "Ġshell": 630, "Ġdownload": 631, "ĠSystem": 632, "Ġnot": 633, "riv": 634, "aun": 635, "our": 636, "se": 637, "hen": 638, "Ġfun": 639, "ĠAc": 640, "Ġfunction": 641, "ult": 642, "Ġfolder": 643, "ac": 644, "vent": 645, "Ġ.": 646, "Ġke": 647, "ched": 648, "so": 649, "Ġro": 650, "icious": 651, "Ġuse": 652, "opy": 653, "olicy": 654, "'s": 655, "fa": 656, "Ġinformation": 657, "ĠAt": 658, "ame": 659, "ore": 660, "ect": 661, "urre": 662, "tack": 663, "ang": 664, "urrent": 665, "The": 666, "ommand": 667, "ied": 668, "ok": 669, "sh": 670, "Ġtim": 671, "Ġsim": 672, "reeBS": 673, "reeBSD": 674, "bs": 675, "end": 676, "ich": 677, "icro": 678, "ally": 679, "Ġpowershell": 680, "log": 681, "ĠSh": 682, "ĠPro": 683, "ĠLinux": 684, "Ġcreate": 685, "tern": 686, "Ġwhich": 687, "32": 688, "soft": 689, "work": 690, "Ġcontain": 691, "Ġspec": 692, "ppl": 693, "ĠCon": 694, "Ġvar": 695, "ange": 696, "el": 697, "ning": 698, "Ġwas": 699, "ath": 700, "tempt": 701, "Ġlist": 702, "Ġhost": 703, "fy": 704, "oul": 705, "lete": 706, "Ġper": 707, "ĠEn": 708, "icrosoft": 709, "ould": 710, "In": 711, "ag": 712, "si": 713, "sion": 714, "Ġwe": 715, "Ġlaun": 716, "Ġconf": 717, "ection": 718, "Ġdirectory": 719, "Ġusers": 720, "Ġopen": 721, "ask": 722, "Ġadd": 723, "pp": 724, "Pro": 725, "Ġun": 726, "Ġal": 727, "Ġar": 728, "Ġaccess": 729, "ase": 730, "etwork": 731, "ĠCh": 732, "tri": 733, "ue": 734, "Ġif": 735, "ind": 736, "ere": 737, "heck": 738, "isten": 739, "Ġdo": 740, "Ġexecuted": 741, "Ġyou": 742, "Cre": 743, "LL": 744, "yp": 745, "Ġcommands": 746, "dentify": 747, "Ġutility": 748, "ST": 749, "Ġi": 750, "Ġca": 751, "ust": 752, "bles": 753, "Ġoutput": 754, "pplication": 755, "ress": 756, "vir": 757, "Windows": 758, "ĠMod": 759, "Ġattack": 760, "Ġkey": 761, "cOS": 762, "zure": 763, "table": 764, "ified": 765, "tory": 766, "Ġhis": 767, "ecur": 768, "ĠAdmin": 769, "Create": 770, "Ġhistory": 771, "Ġk": 772, "Ġtr": 773, "erver": 774, "Ġpriv": 775, "eth": 776, "quer": 777, "ĠFreeBSD": 778, "fault": 779, "En": 780, "bo": 781, "wall": 782, "ern": 783, "Ġpolicy": 784, "WinPwn": 785, "irewall": 786, "Ġgroup": 787, "viron": 788, "ru": 789, "vo": 790, "Ġcode": 791, "ĠSt": 792, "alc": 793, "ĠDirectory": 794, "ersisten": 795, "Ġval": 796, "rompt": 797, "vironment": 798, "ail": 799, "ev": 800, "gh": 801, "mp": 802, "int": 803, "ĠWinPwn": 804, "ĠUse": 805, "ĠRegistry": 806, "Ġvaria": 807, "ethod": 808, "Dis": 809, "cl": 810, "mon": 811, "ick": 812, "ard": 813, "Ġmalicious": 814, "ecurity": 815, "AC": 816, "inary": 817, "Ġinto": 818, "ĠExecutes": 819, "umerate": 820, "Lo": 821, "ear": 822, "fil": 823, "Ġwin": 824, "ator": 825, "Ġattempt": 826, "Ġrunning": 827, "ĠGet": 828, "oftware": 829, "Ġconfig": 830, "64": 831, "fend": 832, "vid": 833, "Ġsc": 834, "rou": 835, "ully": 836, "MI": 837, "gr": 838, "po": 839, "omp": 840, "Ġrequ": 841, "emote": 842, "ize": 843, "chedule": 844, "filtr": 845, "fender": 846, "Ad": 847, "ID": 848, "Re": 849, "This": 850, "av": 851, "ging": 852, "xt": 853, "Ġle": 854, "Ġare": 855, "Ġfoll": 856, "ayload": 857, "Ġdefault": 858, "trol": 859, "De": 860, "mis": 861, "Ġem": 862, "Ġcl": 863, "lear": 864, "Ġpre": 865, "ating": 866, "ession": 867, "ulates": 868, "Ġwithin": 869, "mission": 870, "LM": 871, "ap": 872, "ub": 873, "ĠĠ": 874, "Ġcurrent": 875, "Ġexecutable": 876, "Ġres": 877, "ĠFile": 878, "Ġadmin": 879, "ign": 880, "ther": 881, "Ġtime": 882, "00": 883, "SI": 884, "Ġ1": 885, "econ": 886, "ĠAD": 887, "ĠAzure": 888, "ĠDLL": 889, "oded": 890, "Ġcomp": 891, "istr": 892, "Ġcredentials": 893, "Ġdele": 894, "ĠAdd": 895, "Ġfollow": 896, "and": 897, "awn": 898, "do": 899, "port": 900, "aries": 901, "ules": 902, "ĠmacOS": 903, "ument": 904, "Ġatomic": 905, "form": 906, "troll": 907, "Ġprivile": 908, "ff": 909, "ero": 910, "Ġcheck": 911, "ĠService": 912, "ires": 913, "Ġstd": 914, "idden": 915, "Ġenvironment": 916, "Ġmodify": 917, "ĠCreates": 918, "ĠCredentials": 919, "ersistence": 920, "Ġvalue": 921, "Disable": 922, "AP": 923, "act": 924, "Ġ2": 925, "Ġtask": 926, "Ġab": 927, "Ġexecutes": 928, "ersion": 929, "olum": 930, "amed": 931, "Ġsetting": 932, "rough": 933, "Ġstdout": 934, "coded": 935, "fer": 936, "iti": 937, "ks": 938, "pad": 939, "tection": 940, "Ġcalc": 941, "orer": 942, "Ġpr": 943, "Ġbo": 944, "Ġover": 945, "etc": 946, "ans": 947, "otepad": 948, "puter": 949, "Ġroot": 950, "voke": 951, "olume": 952, "View": 953, "ject": 954, "rit": 955, "Ġtar": 956, "reat": 957, "Ġdump": 958, "Ġbinary": 959, "ĠCommand": 960, "Ġman": 961, "ĠMicrosoft": 962, "emory": 963, "ĠHT": 964, "Ġstart": 965, "Ġshould": 966, "ĠActive": 967, "trib": 968, "Ġfollowing": 969, "troller": 970, "Domain": 971, "EM": 972, "Linux": 973, "fter": 974, "tu": 975, "ĠJ": 976, "ets": 977, "Ġview": 978, "Ġno": 979, "ĠUtil": 980, "adow": 981, "plorer": 982, "Ġmodule": 983, "ches": 984, "Ġinstalled": 985, "Ġvariable": 986, "..": 987, "ave": 988, "uil": 989, "tiv": 990, "ĠApplication": 991, "ĠPowershell": 992, "Ġver": 993, "Ġcomple": 994, "pture": 995, "Ġhas": 996, "ĠDefender": 997, "Ġwindows": 998, "istrator": 999, "du": 1000, "dit": 1001, "ges": 1002, "ove": 1003, "pro": 1004, "wd": 1005, "Ġso": 1006, "Ġcopy": 1007, "ext": 1008, "Ġprompt": 1009, "mage": 1010, "ĠData": 1011, "Ġwithout": 1012, "Ġthrough": 1013, "uration": 1014, "ĠUser": 1015, "Ġspawn": 1016, "udit": 1017, "ernel": 1018, ":\\": 1019, "AM": 1020, "SO": 1021, "ables": 1022, "cry": 1023, "plo": 1024, "Ġsession": 1025, "Ġwhen": 1026, "Ġmess": 1027, "ĠIdentify": 1028, "ĠHK": 1029, "ĠCreate": 1030, "Ġsee": 1031, "Ġspecified": 1032, "Process": 1033, "clud": 1034, "cheduled": 1035, "Con": 1036, "Sh": 1037, "bit": 1038, "line": 1039, "nc": 1040, "nce": 1041, "ron": 1042, "Ġaut": 1043, "Ġcall": 1044, "Ġpayload": 1045, "Ġnetwork": 1046, "Ġmethod": 1047, "Ġonly": 1048, "Ġcreated": 1049, "Ġlogs": 1050, "igh": 1051, "Ġchange": 1052, "ĠLog": 1053, "Ġmalware": 1054, "ĠAccount": 1055, "SH": 1056, "System": 1057, "Ġserver": 1058, "tic": 1059, "ord": 1060, "ected": 1061, "Ġbash": 1062, "Ġrec": 1063, "Ġload": 1064, "Ġli": 1065, "Ġprovid": 1066, "Ġhave": 1067, "emp": 1068, "ĠExecution": 1069, "Ġpermission": 1070, "Ġlaunch": 1071, "rute": 1072, "filtration": 1073, "Ġabout": 1074, "LE": 1075, "ake": 1076, "ged": 1077, "name": 1078, "rary": 1079, "txt": 1080, "Ġ'": 1081, "esk": 1082, "tif": 1083, "Ġtool": 1084, "ingle": 1085, "Ġpip": 1086, "Ġpath": 1087, "Ġob": 1088, "ĠUsing": 1089, "Ġmodif": 1090, "ET": 1091, "IST": 1092, "bed": 1093, "top": 1094, "yth": 1095, "Ġ$": 1096, "Ġes": 1097, "Ġup": 1098, "ermin": 1099, "Ġfirewall": 1100, "Ġuses": 1101, "Ġinter": 1102, "Ġother": 1103, "ĠAut": 1104, "ĠDomain": 1105, "ults": 1106, "Ġcomputer": 1107, "Ġdisable": 1108, "Ġalso": 1109, "fo": 1110, "pass": 1111, "Ġj": 1112, "Ġquer": 1113, "ome": 1114, "Ġpar": 1115, "Ġpack": 1116, "mar": 1117, "Ġnamed": 1118, "Ġnotepad": 1119, "Ġloc": 1120, "opies": 1121, "echo": 1122, "Ġutiliz": 1123, "ĠKe": 1124, "ource": 1125, "Ġverify": 1126, "Ġmessage": 1127, "ython": 1128, "SX": 1129, "ach": 1130, "Ġsta": 1131, "Ġsingle": 1132, "Ġcoll": 1133, "Ġbuil": 1134, "ĠTo": 1135, "ĠDownload": 1136, "ample": 1137, "ĠMac": 1138, "Ġits": 1139, "ĠGroup": 1140, "Ġstore": 1141, "ide": 1142, "ĠAdvers": 1143, "ĠExecute": 1144, "ound": 1145, "ĠAtomic": 1146, "ternal": 1147, "Ġperform": 1148, "Ġconfiguration": 1149, "econd": 1150, "Ġpermissions": 1151, "BA": 1152, "Dump": 1153, "NS": 1154, "bal": 1155, "eed": 1156, "Ġz": 1157, "Ġtemp": 1158, "Ġsecond": 1159, "reen": 1160, "ish": 1161, "Ġwor": 1162, "Ġdec": 1163, "arp": 1164, "ased": 1165, "lock": 1166, "ĠSet": 1167, "ĠTh": 1168, "ulate": 1169, "ĠUAC": 1170, "rite": 1171, "Ġmemory": 1172, "ĠRemote": 1173, "imi": 1174, "ĠNT": 1175, "ĠOut": 1176, "reebs": 1177, "Ġyour": 1178, "ĠAdministrator": 1179, "gram": 1180, "reebsd": 1181, "Current": 1182, "FI": 1183, "Power": 1184, "Set": 1185, "TP": 1186, "ab": 1187, "file": 1188, "net": 1189, "ror": 1190, "Ġ3": 1191, "ĠQ": 1192, "Ġecho": 1193, "Ġafter": 1194, "erb": 1195, "Ġserv": 1196, "Ġtheir": 1197, "ener": 1198, "ensi": 1199, "ĠCopy": 1200, "Ġmach": 1201, "ĠRun": 1202, "url": 1203, "uring": 1204, "ĠVolume": 1205, "Ġprocesses": 1206, "okmar": 1207, "Ġsimulates": 1208, "Ġidentify": 1209, "Delete": 1210, "Ġprevent": 1211, "Ġpipe": 1212, "FILE": 1213, "AT": 1214, "Microsoft": 1215, "Pack": 1216, "WMI": 1217, "freebsd": 1218, "rows": 1219, "ss": 1220, "let": 1221, "Ġpl": 1222, "ence": 1223, "Ġbut": 1224, "ĠTest": 1225, "ĠPassword": 1226, "admin": 1227, "Ġcommon": 1228, "ctor": 1229, "Ġany": 1230, "Ġend": 1231, "Ġevent": 1232, "tract": 1233, "Ġrole": 1234, "ĠModify": 1235, "earch": 1236, "Ġprivileges": 1237, "Ġmodification": 1238, "bedd": 1239, "At": 1240, "IN": 1241, "YST": 1242, "apture": 1243, "fully": 1244, "get": 1245, "oo": 1246, "Ġ0": 1247, "Ġtyp": 1248, "Ġpersistence": 1249, "ices": 1250, "icate": 1251, "ĠSoftware": 1252, "Ġneed": 1253, "Ġbeing": 1254, "very": 1255, "ames": 1256, "amet": 1257, "Ġorder": 1258, "irtu": 1259, "ĠUses": 1260, "Ġund": 1261, "ĠVBA": 1262, "Ġseen": 1263, "umeration": 1264, "Ġbuilt": 1265, "YSTEM": 1266, "irtual": 1267, "DP": 1268, "RE": 1269, "Script": 1270, "ative": 1271, "col": 1272, "ption": 1273, "password": 1274, "und": 1275, "xy": 1276, "one": 1277, "Ġcer": 1278, "Ġfind": 1279, "Ġback": 1280, "Ġins": 1281, "Ġinclud": 1282, "ĠSSH": 1283, "ĠPython": 1284, "Ġoff": 1285, "Ġnet": 1286, "ĠRed": 1287, "ific": 1288, "ĠMan": 1289, "Ġsudo": 1290, "Ġconten": 1291, "ĠFirewall": 1292, "Ġlogon": 1293, "Ġlogging": 1294, "ĠHIST": 1295, "gister": 1296, "Ġchang": 1297, "ĠLocal": 1298, "tocol": 1299, "sole": 1300, "Ġtimes": 1301, "ĠShare": 1302, "ĠShadow": 1303, "Ġweb": 1304, "ĠChrom": 1305, "point": 1306, "ities": 1307, "esktop": 1308, "ĠAdversaries": 1309, "ensitive": 1310, "10": 1311, "Command": 1312, "ace": 1313, "bin": 1314, "dev": 1315, "gain": 1316, "hav": 1317, "li": 1318, "lag": 1319, "Ġown": 1320, "Ġtext": 1321, "Ġagain": 1322, "Ġsys": 1323, "Ġscheduled": 1324, "Ġthey": 1325, "Ġwrit": 1326, "Ġduring": 1327, "ark": 1328, "lobal": 1329, "ĠShell": 1330, "ĠSim": 1331, "ĠCopies": 1332, "ĠUn": 1333, "ading": 1334, "ĠRo": 1335, "Ġsuch": 1336, "ctl": 1337, "Ġls": 1338, "Ġprodu": 1339, "Ġhidden": 1340, "ired": 1341, "Ġattrib": 1342, "Ġlogin": 1343, "Ġsystems": 1344, "Ġenumerate": 1345, "Ġwhat": 1346, "ĠWMI": 1347, "Ġaccounts": 1348, "Execu": 1349, "ĠProcess": 1350, "Ġarg": 1351, "ypass": 1352, "Ġembedd": 1353, "uments": 1354, "havi": 1355, "IS": 1356, "St": 1357, "af": 1358, "bash": 1359, "de": 1360, "dump": 1361, "fore": 1362, "kat": 1363, "Ġim": 1364, "install": 1365, "Ġapp": 1366, "Ġactor": 1367, "exec": 1368, "use": 1369, "ĠSc": 1370, "Ġversion": 1371, "ant": 1372, "Ġmust": 1373, "ĠRes": 1374, "Ġcontrol": 1375, "Ġsuccessfully": 1376, "ĠNetwork": 1377, "ĠInstall": 1378, "Ġcontaining": 1379, "Install": 1380, "Ġkernel": 1381, "Ġsettings": 1382, "ĠUtilize": 1383, "ĠHKLM": 1384, "ĠKey": 1385, "SXi": 1386, "katz": 1387, ".\"": 1388, "11": 1389, "Get": 1390, "List": 1391, "Remote": 1392, "SS": 1393, "To": 1394, "ak": 1395, "bject": 1396, "cs": 1397, "lack": 1398, "nection": 1399, "ps": 1400, "script": 1401, "ves": 1402, "Ġer": 1403, "ream": 1404, "Ġthem": 1405, "Ġclear": 1406, "Ġdri": 1407, "Ġobs": 1408, "ĠSys": 1409, "utes": 1410, "ade": 1411, "Ġlock": 1412, "Ġrules": 1413, "ures": 1414, "ĠMSI": 1415, "quires": 1416, "cel": 1417, "Ġconsole": 1418, "ĠExplorer": 1419, "Ġcreates": 1420, "Ġdelete": 1421, "ĠPowerView": 1422, "Ġenable": 1423, "Ġencry": 1424, "ĠDisable": 1425, "Ġshare": 1426, "Ġdatab": 1427, "ĠKerb": 1428, "Ġspecific": 1429, "icket": 1430, "Add": 1431, "Ġcompress": 1432, "Ġ20": 1433, "ansom": 1434, "Ġtarget": 1435, "bitrary": 1436, "tificate": 1437, "rowser": 1438, "Ġendpoint": 1439, "undll": 1440, "'t": 1441, "Ch": 1442, "If": 1443, "Run": 1444, "Us": 1445, "WS": 1446, "`.": 1447, "ber": 1448, "dll": 1449, "her": 1450, "sv": 1451, "uer": 1452, "Ġip": 1453, "ong": 1454, "Ġsome": 1455, "lev": 1456, "Ġpo": 1457, "Ġdet": 1458, "Ġbase": 1459, "Ġbased": 1460, "ater": 1461, "arted": 1462, "Ġoper": 1463, "ĠAP": 1464, "ĠSp": 1465, "ĠPer": 1466, "ĠPolicy": 1467, "tamp": 1468, "Ġren": 1469, "Ġmain": 1470, "Ġrest": 1471, "ĠRem": 1472, "Ġsub": 1473, "Ġline": 1474, "ĠLD": 1475, "Ġprogram": 1476, "ching": 1477, "Ġdef": 1478, "Ġgener": 1479, "Ġpasswords": 1480, "Ġev": 1481, "tension": 1482, "artup": 1483, "Ġinstallation": 1484, "Ġkeys": 1485, "ternate": 1486, "ĠController": 1487, "Invoke": 1488, "Ġimage": 1489, "boot": 1490, "Ġscreen": 1491, "igned": 1492, "ffice": 1493, "tivity": 1494, "ploit": 1495, "Ġlike": 1496, "Ġparamet": 1497, "Ġseconds": 1498, "ĠThreat": 1499, "ĠOutput": 1500, "Ġmachine": 1501, "Ġtimestamp": 1502, "Ġagainst": 1503, "Ġembedded": 1504, "DS": 1505, "FW": 1506, "LI": 1507, "por": 1508, "ty": 1509, "ute": 1510, "uage": 1511, "ually": 1512, "Ġent": 1513, "Ġav": 1514, "Ġaudit": 1515, "Ġsecurity": 1516, "tim": 1517, "Ġfir": 1518, "env": 1519, "Ġexist": 1520, "ĠCom": 1521, "Ġretri": 1522, "Ġbehavi": 1523, "temp": 1524, "ĠIIS": 1525, "ĠList": 1526, "ĠFiles": 1527, "Ġruns": 1528, "Ġcredential": 1529, "Ġdetection": 1530, "Ġget": 1531, "Ġmode": 1532, "ĠBlack": 1533, "Ġwhere": 1534, "ĠDelete": 1535, "ĠAttempt": 1536, "anguage": 1537, "Ġdoc": 1538, "Ġdoes": 1539, "Ġdeletes": 1540, "ight": 1541, "Ġstored": 1542, "Ġwork": 1543, "ĠChrome": 1544, "Ġerror": 1545, "Ġfirst": 1546, "Comp": 1547, "FreeBSD": 1548, "ML": 1549, "Note": 1550, "OM": 1551, "Object": 1552, "Path": 1553, "SA": 1554, "Util": 1555, "cted": 1556, "ner": 1557, "ob": 1558, "ring": 1559, "test": 1560, "ync": 1561, "Ġapplication": 1562, "lean": 1563, "Ġfound": 1564, "Ġwould": 1565, "ndard": 1566, "usp": 1567, "ĠAl": 1568, "ĠSecurity": 1569, "ĠCapture": 1570, "Ġexecuting": 1571, "ĠPriv": 1572, "ilter": 1573, "istory": 1574, "Ġthreat": 1575, "ĠIP": 1576, "Ġdisk": 1577, "Ġlogged": 1578, "Ġeach": 1579, "ĠDisables": 1580, "ĠWhen": 1581, "ĠLoot": 1582, "Ġlaunches": 1583, "ĠChange": 1584, "ustom": 1585, "Local": 1586, "Ġrequires": 1587, "ĠHTTP": 1588, "Sharp": 1589, "Ġquery": 1590, "imikatz": 1591, "PowerShell": 1592, "abil": 1593, "ĠQuer": 1594, "okmarks": 1595, "Atomic": 1596, "ansomware": 1597, "AN": 1598, "Copy": 1599, "MD": 1600, "NET": 1601, "TW": 1602, "ault": 1603, "cc": 1604, "com": 1605, "eb": 1606, "eat": 1607, "gg": 1608, "gle": 1609, "ition": 1610, "mod": 1611, "rc": 1612, "âĢ": 1613, "Ġ5": 1614, "Ġhe": 1615, "ink": 1616, "Ġsoftware": 1617, "Ġsource": 1618, "Ġsensitive": 1619, "tected": 1620, "Ġblock": 1621, "Ġinput": 1622, "Ġexe": 1623, "unc": 1624, "ĠScript": 1625, "ĠSearch": 1626, "ĠCheck": 1627, "ĠComp": 1628, "ĠDNS": 1629, "ann": 1630, "ĠEvent": 1631, "Ġforce": 1632, "Ġass": 1633, "Ġstring": 1634, "ĠInvoke": 1635, "Ġsets": 1636, "Ġadversaries": 1637, "Ġcontains": 1638, "Ġlaunched": 1639, "ĠChang": 1640, "Ġattacks": 1641, "box": 1642, "Log": 1643, "Control": 1644, "Ġautom": 1645, "Ġservices": 1646, "oogle": 1647, "Ġunder": 1648, "Ġcontents": 1649, "Ġdatabase": 1650, "ĠKerbero": 1651, "ĠLDAP": 1652, "leanup": 1653, "uspicious": 1654, "\".": 1655, "),": 1656, "HK": 1657, "Service": 1658, "Security": 1659, "Version": 1660, "You": 1661, "`,": 1662, "cip": 1663, "eam": 1664, "ive": 1665, "jection": 1666, "ler": 1667, "the": 1668, "win": 1669, "zip": 1670, "Ġtri": 1671, "incip": 1672, "tend": 1673, "tect": 1674, "orma": 1675, "Ġflag": 1676, "Ġpass": 1677, "macOS": 1678, "Ġinf": 1679, "Ġinsta": 1680, "ĠSYSTEM": 1681, "ĠTask": 1682, "ĠPersistence": 1683, "Ġnon": 1684, "Ġnum": 1685, "Ġname": 1686, "Ġreg": 1687, "Ġbeen": 1688, "ĠEdit": 1689, "ilar": 1690, "Ġms": 1691, "ĠRDP": 1692, "old": 1693, "amper": 1694, "ĠMal": 1695, "ĠIf": 1696, "Ġcontroller": 1697, "Ġbypass": 1698, "Ġdiscover": 1699, "Ġdev": 1700, "ĠHidden": 1701, "ĠGoogle": 1702, "Ġmodified": 1703, "ĠBypass": 1704, "ĠOffice": 1705, "Ġwho": 1706, "Ġutilize": 1707, "Ġremotely": 1708, "Ġallow": 1709, "ĠAttack": 1710, "logon": 1711, "Enumerate": 1712, "Ġvariables": 1713, "Ġrequired": 1714, "Ġdeleted": 1715, "Ġstartup": 1716, "ĠJScript": 1717, "ĠMacOS": 1718, "CurrentVersion": 1719, "ĠScan": 1720, "Ġparameter": 1721, "ĠQuery": 1722, "incipal": 1723, "AD": 1724, "Azure": 1725, "Com": 1726, "Mod": 1727, "ON": 1728, "PX": 1729, "Password": 1730, "Tr": 1731, "cp": 1732, "ced": 1733, "eve": 1734, "fus": 1735, "pr": 1736, "pted": 1737, "squer": 1738, "uccessf": 1739, "ĠX": 1740, "Ġaction": 1741, "hes": 1742, "ties": 1743, "Ġcleanup": 1744, "ecre": 1745, "Ġpart": 1746, "Ġbrute": 1747, "Ġextract": 1748, "Ġextension": 1749, "ast": 1750, "ĠAV": 1751, "ĠAccess": 1752, "ĠApp": 1753, "ĠPS": 1754, "Ġvul": 1755, "Ġvirtual": 1756, "cessfully": 1757, "pty": 1758, "Ġsucessfully": 1759, "Ġlater": 1760, "Ġproper": 1761, "Ġhow": 1762, "irm": 1763, "ĠPowerSharp": 1764, "ĠGlobal": 1765, "Ġgo": 1766, "off": 1767, "ĠBo": 1768, "ĠBash": 1769, "ĠCredential": 1770, "ĠNo": 1771, "ĠRequires": 1772, "tra": 1773, "Ġcmdlet": 1774, "ĠKernel": 1775, "Ġdownloading": 1776, "siexec": 1777, "Ġconfirm": 1778, "Ġadded": 1779, "Ġarbitrary": 1780, "ĠModule": 1781, "Ġkn": 1782, "ernet": 1783, "ĠĠĠĠ": 1784, "ference": 1785, "Ġdumped": 1786, "ĠAuto": 1787, "passwd": 1788, "Ġutilizing": 1789, "Ġzero": 1790, "ĠSetting": 1791, "ĠHISTFILE": 1792, "Ġenabled": 1793, "ĠAPI": 1794, "Ġavail": 1795, "Ġbehavior": 1796, "SASS": 1797, "ĠChanges": 1798, "fusc": 1799, "ĠPowerSharpPack": 1800, "ARE": 1801, "Clear": 1802, "ER": 1803, "ESXi": 1804, "File": 1805, "IT": 1806, "Pwd": 1807, "RL": 1808, "UID": 1809, "ale": 1810, "con": 1811, "cmd": 1812, "command": 1813, "ever": 1814, "ft": 1815, "fig": 1816, "jec": 1817, "ution": 1818, "ym": 1819, "Ġ%": 1820, "Ġport": 1821, "Ġdll": 1822, "Ġdif": 1823, "ense": 1824, "Ġinfo": 1825, "Ġexfiltration": 1826, "ĠAll": 1827, "ĠCent": 1828, "ĠDo": 1829, "Ġvolume": 1830, "ither": 1831, "Ġbefore": 1832, "ild": 1833, "Ġthere": 1834, "urn": 1835, "ĠMethod": 1836, "ĠLSASS": 1837, "ĠExcel": 1838, "ĠHistory": 1839, "Ġstarted": 1840, "Ġevery": 1841, "Ġelev": 1842, "Ġeither": 1843, "ĠWord": 1844, "izing": 1845, "ĠDele": 1846, "Ġsear": 1847, "udo": 1848, "ĠKub": 1849, "aunch": 1850, "hentic": 1851, "Ġsimilar": 1852, "ĠProtocol": 1853, "ternet": 1854, "ĠEnumerate": 1855, "ager": 1856, "sive": 1857, "Ġaddress": 1858, "Ġgroups": 1859, "ails": 1860, "Ġattempts": 1861, "Ġconfigure": 1862, "Ġlever": 1863, "Ġempty": 1864, "Ġ10": 1865, "andler": 1866, "ferent": 1867, "Ġbox": 1868, "Ġboot": 1869, "Ġmanually": 1870, "ĠHTML": 1871, "tutil": 1872, "ĠUtilizing": 1873, "process": 1874, "Ġprovided": 1875, "ĠGroups": 1876, "Ġchanged": 1877, "Ġlsass": 1878, "Execute": 1879, "Ġappear": 1880, "Ġmaintain": 1881, "ploitation": 1882, "Ġentry": 1883, "ability": 1884, "Ġnumber": 1885, "Ġvulner": 1886, "ernetes": 1887, "ĠSettings": 1888, "Ġdifferent": 1889, "ĠKubernetes": 1890, "15": 1891, "36": 1892, "Access": 1893, "App": 1894, "Bit": 1895, "Data": 1896, "FTW": 1897, "LO": 1898, "OR": 1899, "TEM": 1900, "US": 1901, "cut": 1902, "ctive": 1903, "code": 1904, "giti": 1905, "hor": 1906, "ls": 1907, "mun": 1908, "mPwd": 1909, "nti": 1910, "null": 1911, "service": 1912, "sync": 1913, "tmp": 1914, "ual": 1915, "we": 1916, "Ġ4": 1917, "Ġ7": 1918, "Ġx": 1919, "ĠYou": 1920, "Ġtry": 1921, "Ġcustom": 1922, "lly": 1923, "Ġfew": 1924, "Ġfeat": 1925, "Ġpri": 1926, "Ġdesktop": 1927, "mate": 1928, "ically": 1929, "Ġexp": 1930, "ĠAWS": 1931, "ĠSM": 1932, "ĠCA": 1933, "ĠClear": 1934, "ĠPayload": 1935, "tance": 1936, "ance": 1937, "ĠUPX": 1938, "Ġmail": 1939, "ĠEm": 1940, "Ġmight": 1941, "ations": 1942, "Ġone": 1943, "Ġrule": 1944, "romis": 1945, "plic": 1946, "ĠImage": 1947, "Ġconnection": 1948, "ime": 1949, "chost": 1950, "ĠFire": 1951, "ĠExfiltration": 1952, "Ġenumeration": 1953, "ĠNote": 1954, "ĠOver": 1955, "ĠOpen": 1956, "ization": 1957, "ortcut": 1958, "Exec": 1959, "ĠAttrib": 1960, "Ġart": 1961, "Ġcache": 1962, "Ġcapture": 1963, "Ġattacker": 1964, "Ġtrunc": 1965, "ĠStop": 1966, "ersistent": 1967, "eved": 1968, "AdmPwd": 1969, "Ġlegiti": 1970, "Ġcompromis": 1971, "duct": 1972, "SOFTW": 1973, "ploy": 1974, "Ġprovide": 1975, "erminal": 1976, "Ġpackets": 1977, "Ġtempor": 1978, "ĠNTDS": 1979, "Ġplac": 1980, "Ġdriver": 1981, "User": 1982, "windows": 1983, "tended": 1984, "ĠMalware": 1985, "ĠAttackers": 1986, "uccessful": 1987, "sively": 1988, "Ġconfigured": 1989, "TEMP": 1990, "Ġlegitimate": 1991, "SOFTWARE": 1992, ".,": 1993, "CU": 1994, "IG": 1995, "PO": 1996, "abl": 1997, "atic": 1998, "brary": 1999, "cron": 2000, "ell": 2001, "fw": 2002, "hip": 2003, "nal": 2004, "nake": 2005, "ook": 2006, "pa": 2007, "res": 2008, "sing": 2009, "write": 2010, "Ġ<": 2011, "Ġ|": 2012, "ined": 2013, "inal": 2014, "erve": 2015, "ertificate": 2016, "Ġste": 2017, "read": 2018, "text": 2019, "Ġfull": 2020, "Ġwish": 2021, "Ġpor": 2022, "Ġpost": 2023, "encoded": 2024, "Ġintended": 2025, "asquer": 2026, "ality": 2027, "ĠCl": 2028, "ĠCMD": 2029, "ĠTeam": 2030, "ĠPs": 2031, "ĠPort": 2032, "ership": 2033, "ulti": 2034, "ulating": 2035, "Ġnumer": 2036, "Ġread": 2037, "Ġmasquer": 2038, "Ġmulti": 2039, "Ġransomware": 2040, "ĠIt": 2041, "Ġlanguage": 2042, "Ġprofile": 2043, "Ġproxy": 2044, "Ġusername": 2045, "ĠFor": 2046, "ĠFrom": 2047, "Ġcreation": 2048, "Ġgu": 2049, "ĠBrowser": 2050, "ipbo": 2051, "ĠVM": 2052, "ĠVBS": 2053, "Ġutilities": 2054, "ĠWith": 2055, "Ġsend": 2056, "Ġscripts": 2057, "ournal": 2058, "sel": 2059, "Ġlists": 2060, "ages": 2061, "Ġopened": 2062, "ereq": 2063, "ĠModif": 2064, "Admin": 2065, "Ġclass": 2066, "aph": 2067, "Ġresults": 2068, "Ġcopying": 2069, "Ġtools": 2070, "Ġobtain": 2071, "Ġescal": 2072, "Ġupd": 2073, "Ġqueries": 2074, "ternals": 2075, "Ġzip": 2076, "Ġownership": 2077, "Ġsyslog": 2078, "ĠUninstall": 2079, "ĠResults": 2080, "Ġobserve": 2081, "Ġdetermin": 2082, "ĠRemove": 2083, "Ġhel": 2084, "HKLM": 2085, "ĠEditor": 2086, "Ġdevice": 2087, "Modify": 2088, "ipboard": 2089, "21": 2090, "33": 2091, "CP": 2092, "CLI": 2093, "EY": 2094, "HM": 2095, "Item": 2096, "NC": 2097, "No": 2098, "Open": 2099, "Test": 2100, "Tamper": 2101, "ZE": 2102, "ause": 2103, "bod": 2104, "bunt": 2105, "ci": 2106, "domain": 2107, "fle": 2108, "gine": 2109, "gsv": 2110, "host": 2111, "mcs": 2112, "nect": 2113, "py": 2114, "ses": 2115, "will": 2116, "when": 2117, "Ġtw": 2118, "Ġtake": 2119, "Ġticket": 2120, "ines": 2121, "init": 2122, "onit": 2123, "Ġsame": 2124, "Ġcr": 2125, "Ġcould": 2126, "Ġcurl": 2127, "orre": 2128, "Ġwrite": 2129, "Ġwant": 2130, "its": 2131, "Ġbin": 2132, "Ġexfiltr": 2133, "Ġexample": 2134, "ari": 2135, "ases": 2136, "asic": 2137, "asion": 2138, "look": 2139, "ĠAfter": 2140, "ĠServer": 2141, "ĠCHM": 2142, "ĠPr": 2143, "ĠDesktop": 2144, "tabl": 2145, "tables": 2146, "ular": 2147, "Ġred": 2148, "Ġreboot": 2149, "ptures": 2150, "cker": 2151, "ckBit": 2152, "ĠRAT": 2153, "ĠMo": 2154, "Ġlong": 2155, "ĠLAP": 2156, "vel": 2157, "chi": 2158, "Ġhash": 2159, "otenti": 2160, "emon": 2161, "Ġdiscovery": 2162, "Ġdefender": 2163, "ĠHel": 2164, "Ġstream": 2165, "Ġencoded": 2166, "Ġenables": 2167, "Ġmodules": 2168, "Ġupon": 2169, "ĠView": 2170, "ĠInjection": 2171, "ized": 2172, "ĠLoad": 2173, "olicies": 2174, "Ġallows": 2175, "shark": 2176, "Ġcontainer": 2177, "Ġcontainers": 2178, "Ġspecify": 2179, "Ġvari": 2180, "aging": 2181, "Ġtrick": 2182, "void": 2183, "SIZE": 2184, "Ġcompile": 2185, "doc": 2186, "Ġprivilege": 2187, "Ġbookmarks": 2188, "Ġnobod": 2189, "ovement": 2190, "Ġcalled": 2191, "Ġobfusc": 2192, "Ġestabl": 2193, "fox": 2194, "Ġjournal": 2195, "Ġutilizes": 2196, "Ġcollect": 2197, "ĠMacro": 2198, "Packet": 2199, "Ġarguments": 2200, "Ġlikely": 2201, "AND": 2202, "gger": 2203, "ĠKerberos": 2204, "Ġgoing": 2205, "Ġavailable": 2206, "jects": 2207, "hentication": 2208, "Ġfeature": 2209, "ĠSMB": 2210, "abling": 2211, "Ġports": 2212, "asquerading": 2213, "Ġmultiple": 2214, "Ġdetermine": 2215, "buntu": 2216, "ĠLAPS": 2217, "Ġnobody": 2218, "27": 2219, "55": 2220, "CK": 2221, "DNS": 2222, "Find": 2223, "Fault": 2224, "Hound": 2225, "Line": 2226, "Pr": 2227, "Prompt": 2228, "Server": 2229, "Software": 2230, "SYSTEM": 2231, "Suspicious": 2232, "Successful": 2233, "Time": 2234, "UFW": 2235, "ays": 2236, "gan": 2237, "ix": 2238, "ives": 2239, "kit": 2240, "ld": 2241, "link": 2242, "na": 2243, "pd": 2244, "pf": 2245, "pec": 2246, "vchost": 2247, "Ġ*": 2248, "Ġ=": 2249, "Ġri": 2250, "Ġtshark": 2251, "internals": 2252, "Ġachi": 2253, "erFault": 2254, "Ġssh": 2255, "Ġsample": 2256, "Ġsvchost": 2257, "tead": 2258, "Ġthese": 2259, "Ġcron": 2260, "lets": 2261, "Ġfilter": 2262, "Ġwscript": 2263, "omplic": 2264, "Ġpat": 2265, "Ġpers": 2266, "uster": 2267, "Ġdirect": 2268, "mat": 2269, "Ġexternal": 2270, "arts": 2271, "aract": 2272, "ĠAr": 2273, "ĠCr": 2274, "ĠCmd": 2275, "ĠCode": 2276, "ĠTicket": 2277, "ĠPAM": 2278, "ĠDump": 2279, "ulation": 2280, "Ġrel": 2281, "ĠUnc": 2282, "ĠUFW": 2283, "ĠEX": 2284, "ĠEv": 2285, "Ġmore": 2286, "Ġlook": 2287, "cke": 2288, "Ġran": 2289, "ursively": 2290, "amine": 2291, "ply": 2292, "ĠMemory": 2293, "Ġlast": 2294, "Ġanot": 2295, "Ġhigh": 2296, "ĠFolder": 2297, "rypt": 2298, "emb": 2299, "arent": 2300, "ĠGPO": 2301, "Ġgain": 2302, "Ġens": 2303, "puters": 2304, "Ġactive": 2305, "Ġactivity": 2306, "ĠBy": 2307, "ĠVirtual": 2308, "acket": 2309, "ĠOn": 2310, "Ġspo": 2311, "perties": 2312, "agement": 2313, "Examine": 2314, "Ġdownloaded": 2315, "ĠActivity": 2316, "Ġfunctionality": 2317, "face": 2318, "ĠProxy": 2319, "ĠEncoded": 2320, "Ġwell": 2321, "Ġattackers": 2322, "Enable": 2323, "ĠStartup": 2324, "Ġscann": 2325, "Ġlevel": 2326, "Ġcluster": 2327, "Ġresult": 2328, "Ġprint": 2329, "Ġprincipal": 2330, "rites": 2331, "SOCK": 2332, "crypt": 2333, "ĠLogs": 2334, "Ġrecursively": 2335, "Ġlocale": 2336, "Ġcollection": 2337, "Ġcollected": 2338, "Ġworks": 2339, "Ġservers": 2340, "okmark": 2341, "Ġtypically": 2342, "Ġcertificate": 2343, "Ġincluding": 2344, "ĠManager": 2345, "ĠRoot": 2346, "ĠRocke": 2347, "Ġattributes": 2348, "Ġattribute": 2349, "Startup": 2350, "Ġlocked": 2351, "Ġencrypt": 2352, "ĠPermission": 2353, "Ġdefined": 2354, "time": 2355, "Ġdocument": 2356, "Ġdocuments": 2357, "Compress": 2358, "common": 2359, "Ġautomatic": 2360, "ormal": 2361, "ecrets": 2362, "Ġknown": 2363, "Ġelevated": 2364, "ĠEmulates": 2365, "ĠFirefox": 2366, "ĠAttributes": 2367, "Ġtemporary": 2368, "ello": 2369, "Ġnumerous": 2370, "Ġhelp": 2371, "gsvr": 2372, "onitor": 2373, "Ġrigh": 2374, "omplicated": 2375, "aracter": 2376, "ĠUncomplicated": 2377, "Ġanother": 2378, "Ġscanned": 2379, "\",": 2380, "AL": 2381, "AR": 2382, "All": 2383, "Aut": 2384, "Ass": 2385, "Active": 2386, "COM": 2387, "Gate": 2388, "IB": 2389, "Msiexec": 2390, "MAND": 2391, "Network": 2392, "PF": 2393, "Powershell": 2394, "PAC": 2395, "PID": 2396, "RM": 2397, "Un": 2398, "Use": 2399, "Web": 2400, "\\\"": 2401, "aemon": 2402, "bot": 2403, "ball": 2404, "bpf": 2405, "ep": 2406, "hold": 2407, "ial": 2408, "ient": 2409, "ken": 2410, "les": 2411, "list": 2412, "ness": 2413, "pre": 2414, "ray": 2415, "van": 2416, "view": 2417, "xity": 2418, "zill": 2419, "Ġ,": 2420, "Ġ6": 2421, "Ġ>": 2422, "Ġqu": 2423, "Ġid": 2424, "Ġter": 2425, "Ġtcp": 2426, "Ġavoid": 2427, "esc": 2428, "ested": 2429, "Ġschedule": 2430, "Ġsav": 2431, "Ġps": 2432, "Ġpersistent": 2433, "user": 2434, "usts": 2435, "Ġdes": 2436, "Ġbec": 2437, "mail": 2438, "Ġind": 2439, "Ġexploitation": 2440, "ares": 2441, "etch": 2442, "ĠSaf": 2443, "ĠColl": 2444, "ilent": 2445, "utl": 2446, "ĠDen": 2447, "tage": 2448, "ulator": 2449, "ithub": 2450, "Ġnative": 2451, "Ġregister": 2452, "ĠEvery": 2453, "ĠESXi": 2454, "Ġmimikatz": 2455, "Ġrundll": 2456, "ĠRundll": 2457, "Ġformat": 2458, "Ġthus": 2459, "urpo": 2460, "ĠWinlogon": 2461, "ĠID": 2462, "Ġlisten": 2463, "ĠLaunch": 2464, "Ġconn": 2465, "Ġcons": 2466, "irection": 2467, "ĠExport": 2468, "str": 2469, "ĠHost": 2470, "ĠHash": 2471, "cription": 2472, "ĠGr": 2473, "ĠGu": 2474, "ĠOS": 2475, "ĠOper": 2476, "Ġremove": 2477, "Ġchoo": 2478, "Ġ`/": 2479, "umerates": 2480, "Exp": 2481, "Ġinstaller": 2482, "Ġshellcode": 2483, "Ġdownloads": 2484, "soci": 2485, "Ġsimple": 2486, "Ġsimulate": 2487, "Ġsimply": 2488, "ĠSharp": 2489, "ternative": 2490, "ĠControl": 2491, "ĠConfig": 2492, "ĠEnumeration": 2493, "Ġopenss": 2494, "Ġadding": 2495, "Product": 2496, "Ġalternate": 2497, "Ġarp": 2498, "indow": 2499, "Ġtrusts": 2500, "ĠStream": 2501, "Discover": 2502, "round": 2503, "Ġrequest": 2504, "ĠHTA": 2505, "Ġcompleted": 2506, "Ġcompletes": 2507, "Ġcomplexity": 2508, "ĠHKEY": 2509, "ĠLogin": 2510, "ĠLogging": 2511, "Ġloaded": 2512, "tification": 2513, "Ġpacked": 2514, "Ġlocation": 2515, "ĠTool": 2516, "Ġdecod": 2517, "Ġdecode": 2518, "ĠNTLM": 2519, "CurrentControl": 2520, "Ġinside": 2521, "Ġinclude": 2522, "Ġoffline": 2523, "ĠManip": 2524, "Ġproduct": 2525, "Ġproduction": 2526, "Execution": 2527, "Start": 2528, "Ġencrypted": 2529, "Change": 2530, "Ġiptables": 2531, "Ġdetails": 2532, "Ġrenamed": 2533, "porting": 2534, "Ġexists": 2535, "Ġretrieve": 2536, "ĠLists": 2537, "itionally": 2538, "Ġinstance": 2539, "ĠDeletes": 2540, "USER": 2541, "munication": 2542, "Ġprior": 2543, "ĠClears": 2544, "Ġtruncate": 2545, "Ġcompromised": 2546, "Ġplaced": 2547, "ĠPsExec": 2548, "Ġmasquerade": 2549, "ĠForce": 2550, "Ġescalation": 2551, "ĠMozill": 2552, "Ġvariations": 2553, "Ġestablish": 2554, "Ġrelated": 2555, "Ġspool": 2556, "Ġrights": 2557, "COMMAND": 2558, "Ġopenssl": 2559, "CurrentControlSet": 2560, "ĠMozilla": 2561, "%\\": 2562, "16": 2563, "40": 2564, "AWS": 2565, "Bypass": 2566, "Ca": 2567, "Co": 2568, "Cim": 2569, "Cmd": 2570, "Certificate": 2571, "DLL": 2572, "Edit": 2573, "For": 2574, "HIST": 2575, "Hello": 2576, "KET": 2577, "Mal": 2578, "Masquerading": 2579, "Net": 2580, "PP": 2581, "Policies": 2582, "RA": 2583, "RO": 2584, "SR": 2585, "Scheduled": 2586, "Stop": 2587, "Search": 2588, "UAC": 2589, "WD": 2590, "With": 2591, "When": 2592, "\\\\": 2593, "].": 2594, "audit": 2595, "cation": 2596, "dow": 2597, "down": 2598, "fense": 2599, "jack": 2600, "kes": 2601, "less": 2602, "mi": 2603, "mic": 2604, "met": 2605, "nn": 2606, "ns": 2607, "nam": 2608, "not": 2609, "os": 2610, "ogr": 2611, "pg": 2612, "ric": 2613, "run": 2614, "rame": 2615, "sance": 2616, "ubl": 2617, "ufw": 2618, "var": 2619, "writes": 2620, "ynam": 2621, "inter": 2622, "esfully": 2623, "Ġsw": 2624, "red": 2625, "issance": 2626, "Ġthepassword": 2627, "Ġtheft": 2628, "Ġcat": 2629, "Ġcopies": 2630, "Ġcorre": 2631, "Ġfur": 2632, "Ġfam": 2633, "Ġtoken": 2634, "Ġpower": 2635, "Ġpotenti": 2636, "ush": 2637, "Ġdon": 2638, "Ġdest": 2639, "Ġdown": 2640, "Ġbat": 2641, "main": 2642, "mages": 2643, "atus": 2644, "Ġexec": 2645, "Ġexit": 2646, "ashes": 2647, "ĠSear": 2648, "ĠSpo": 2649, "ĠSession": 2650, "ĠSIG": 2651, "ĠSnake": 2652, "alt": 2653, "ĠCan": 2654, "ĠCalc": 2655, "ĠTr": 2656, "ĠPop": 2657, "ĠPacket": 2658, "ĠDll": 2659, "ĠDark": 2660, "Ġoften": 2661, "Ġnote": 2662, "Ġret": 2663, "Ġrefle": 2664, "Ġremain": 2665, "ĠURL": 2666, "ĠUNC": 2667, "ĠUpd": 2668, "ries": 2669, "Winlogon": 2670, "Ġcommunication": 2671, "Ġmar": 2672, "ĠEd": 2673, "ĠESX": 2674, "Ġme": 2675, "cket": 2676, "ckets": 2677, "ĠRecon": 2678, "ĠMail": 2679, "Ġsucc": 2680, "ĠIde": 2681, "quest": 2682, "Ġanti": 2683, "Ġhives": 2684, "Ġbytes": 2685, "ĠFind": 2686, "irus": 2687, "iration": 2688, "erved": 2689, "Ġdeploy": 2690, "stru": 2691, "ĠHandler": 2692, "ĠGener": 2693, "Ġgr": 2694, "Ġgithub": 2695, "Ġstop": 2696, "wner": 2697, "ĠUsers": 2698, "ĠBIT": 2699, "ĠVia": 2700, "ĠVIB": 2701, "ĠNew": 2702, "ackup": 2703, "ĠOwner": 2704, "Ġshow": 2705, "ĠExecutable": 2706, "ĠWerFault": 2707, "Ġsetup": 2708, "Ġchmod": 2709, "Ġchild": 2710, "ĠDefense": 2711, "Ġtechniques": 2712, "Ġcmdlets": 2713, "Exfiltration": 2714, "faults": 2715, "shta": 2716, "shot": 2717, "shadow": 2718, "ĠProperties": 2719, "ĠContain": 2720, "ather": 2721, "ĠEnvironment": 2722, "ĠEngine": 2723, "Ġadds": 2724, "Ġuntil": 2725, "Ġimages": 2726, "Ġcap": 2727, "Ġtrans": 2728, "Encoded": 2729, "alcon": 2730, "LockBit": 2731, "Register": 2732, "Ġclipboard": 2733, "Ġclient": 2734, "Ġresource": 2735, "Ġadministrator": 2736, "001": 2737, "istrative": 2738, "Ġprivileged": 2739, "Ġtasks": 2740, "ĠJSO": 2741, "tivate": 2742, "proc": 2743, "nces": 2744, "Ġrecent": 2745, "Ġrecord": 2746, "Ġobject": 2747, "Ġjust": 2748, "ĠKeys": 2749, "Setting": 2750, "Ġmachines": 2751, "Ġcommonly": 2752, "Ġtype": 2753, "Ġcertutil": 2754, "Ġinstead": 2755, "Ġnetsh": 2756, "Ġcontent": 2757, "Ġowner": 2758, "Ġwrites": 2759, "Ġwriting": 2760, "Ġwritten": 2761, "ĠSimulates": 2762, "ĠSimulate": 2763, "Ġobserved": 2764, "ĠSysmon": 2765, "Users": 2766, "Ġpoint": 2767, "Ġoperation": 2768, "ĠSpawn": 2769, "ĠPerform": 2770, "Ġrenames": 2771, "Ġrestarts": 2772, "Ġscreenshot": 2773, "ported": 2774, "Ġexisting": 2775, "ĠAlternate": 2776, "ĠHTTPS": 2777, "Ġblocking": 2778, "Ġassemb": 2779, "Ġtrigger": 2780, "Ġinfected": 2781, "Ġinstances": 2782, "olders": 2783, "Computer": 2784, "ĠAppCmd": 2785, "Ġhowever": 2786, "ĠBookmarks": 2787, "ĠCenter": 2788, "Ġleveraging": 2789, "Ġvulnerable": 2790, "self": 2791, "Ġupdated": 2792, "ĠHelp": 2793, "ganogr": 2794, "naissance": 2795, "Ġachieved": 2796, "ĠCmdlet": 2797, "PACKET": 2798, "Ġchoosing": 2799, "ramework": 2800, "Ġfurther": 2801, "Ġfamil": 2802, "ĠSearches": 2803, "ĠDarkGate": 2804, "Ġreflect": 2805, "ĠUpdate": 2806, "Ġsuccesfully": 2807, "ĠIdeally": 2808, "ĠBITS": 2809, "ĠJSON": 2810, "Ġassembly": 2811, "ganograph": 2812, "\")": 2813, "*.": 2814, "12": 2815, "19": 2816, "24": 2817, "35": 2818, "44": 2819, "50": 2820, "Base": 2821, "CM": 2822, "Cron": 2823, "CAL": 2824, "Desk": 2825, "EL": 2826, "EX": 2827, "Event": 2828, "HIN": 2829, "HEL": 2830, "Mac": 2831, "MAC": 2832, "NT": 2833, "NAM": 2834, "PC": 2835, "PN": 2836, "PU": 2837, "Pre": 2838, "Port": 2839, "Recon": 2840, "RHEL": 2841, "Sc": 2842, "Sup": 2843, "Sudo": 2844, "TE": 2845, "UI": 2846, "by": 2847, "ca": 2848, "ces": 2849, "cat": 2850, "call": 2851, "comp": 2852, "cDump": 2853, "dst": 2854, "dmp": 2855, "eus": 2856, "fish": 2857, "ger": 2858, "gress": 2859, "hing": 2860, "halt": 2861, "iv": 2862, "ite": 2863, "ible": 2864, "ijack": 2865, "low": 2866, "late": 2867, "mb": 2868, "ne": 2869, "ng": 2870, "names": 2871, "ose": 2872, "ph": 2873, "power": 2874, "pull": 2875, "ptance": 2876, "push": 2877, "rar": 2878, "ration": 2879, "rsync": 2880, "sa": 2881, "ssi": 2882, "tor": 2883, "ues": 2884, "util": 2885, "ward": 2886, "zero": 2887, "Ġ&": 2888, "Ġ8": 2889, "Ġ32": 2890, "Ġtor": 2891, "Ġterminal": 2892, "ination": 2893, "hed": 2894, "esent": 2895, "Ġsay": 2896, "Ġsection": 2897, "Ġsigned": 2898, "Ġsuspicious": 2899, "Ġsym": 2900, "register": 2901, "istance": 2902, "tit": 2903, "tire": 2904, "Ġclo": 2905, "Ġcam": 2906, "Ġcscript": 2907, "ores": 2908, "Ġway": 2909, "Ġwmic": 2910, "Ġping": 2911, "Ġpod": 2912, "Ġpurpo": 2913, "ites": 2914, "itch": 2915, "usion": 2916, "Ġden": 2917, "enta": 2918, "ented": 2919, "owdst": 2920, "Ġbit": 2921, "Ġben": 2922, "Ġbad": 2923, "mast": 2924, "rop": 2925, "Ġinjects": 2926, "ecure": 2927, "Ġexport": 2928, "Ġexplorer": 2929, "Ġexclud": 2930, "asting": 2931, "local": 2932, "ĠSets": 2933, "ĠSilent": 2934, "alue": 2935, "iled": 2936, "utdown": 2937, "ĠPre": 2938, "ĠPass": 2939, "ĠPrompt": 2940, "ĠPID": 2941, "erson": 2942, "Ġvault": 2943, "anting": 2944, "Ġnames": 2945, "Ġnormal": 2946, "Ġrepl": 2947, "Ġ->": 2948, "ĠUID": 2949, "ĠUbuntu": 2950, "ader": 2951, "rike": 2952, "Ġcombin": 2953, "Ġcomputers": 2954, "tems": 2955, "ĠEs": 2956, "Ġmsiexec": 2957, "Ġonce": 2958, "Ġrand": 2959, "Ġrsync": 2960, "ĠRec": 2961, "ĠRansomware": 2962, "Ġthres": 2963, "ĠWindow": 2964, "ĠMS": 2965, "ĠMonitor": 2966, "ĠLanguage": 2967, "quis": 2968, "ceptance": 2969, "Ġprotection": 2970, "Ġprogress": 2971, "Ġhand": 2972, "otnet": 2973, "Ġusernames": 2974, "ĠFalcon": 2975, "Ġadvan": 2976, "Ġitself": 2977, "ervices": 2978, "Ġassoci": 2979, "Ġ\"$": 2980, "standard": 2981, "Ġsystemd": 2982, "Ġsystemctl": 2983, "Ġentire": 2984, "Ġemail": 2985, "Ġacceptance": 2986, "ĠBrute": 2987, "ĠBasic": 2988, "ĠDiscover": 2989, "force": 2990, "ĠNon": 2991, "ĠNot": 2992, "ĠNotepad": 2993, "ĠInline": 2994, "Ġshortcut": 2995, "ĠReport": 2996, "Ġremo": 2997, "Ġchown": 2998, "Ġchann": 2999, "Ġmaldoc": 3000, "Extract": 3001, "ĠSystemd": 3002, "Ġfunctions": 3003, "chedul": 3004, "Ġrout": 3005, "ĠProtection": 3006, "pplied": 3007, "ĠConnect": 3008, "Ġvarious": 3009, "Ġlisting": 3010, "ĠEnumerates": 3011, "Provid": 3012, "Ġalong": 3013, "erequis": 3014, "ype": 3015, "Ġcaching": 3016, "Ġcaptures": 3017, "Ġtrap": 3018, "Ġprivate": 3019, "Encrypt": 3020, "ĠStart": 3021, "Ġvalid": 3022, "clusion": 3023, "ickets": 3024, "Detect": 3025, "Ġemulate": 3026, "Ġclick": 3027, "ubeus": 3028, "Ġreset": 3029, "Ġadministrative": 3030, "ignment": 3031, "ĠAdds": 3032, "ĠAdditionally": 3033, "ffect": 3034, "DomainG": 3035, "...": 3036, "ĠApplications": 3037, "Ġcomplete": 3038, "Ġcompletion": 3039, "Ġhashes": 3040, "profile": 3041, "Ġcallout": 3042, "Ġmethods": 3043, "Ġrecon": 3044, "Ġlibrary": 3045, "Ġinterface": 3046, "ĠAutom": 3047, "Ġlocally": 3048, "Ġstage": 3049, "Ġstaging": 3050, "Ġstandard": 3051, "imited": 3052, "ĠOutlook": 3053, "ĠAdministrators": 3054, "PowerView": 3055, "Ġplace": 3056, "ĠPasswords": 3057, "INT": 3058, "Ġunde": 3059, "Ġbuiltin": 3060, "ptions": 3061, "Ġchanges": 3062, "lags": 3063, "Ġproduce": 3064, "Ġargument": 3065, "bashrc": 3066, "Ġcontrols": 3067, "ĠInstallUtil": 3068, "InstallUtil": 3069, "ĠSysinternals": 3070, "Ġpossi": 3071, "Ġdefense": 3072, "Ġgenerated": 3073, "Ġevasion": 3074, "Ġapplications": 3075, "ĠAlternative": 3076, "ĠPrivile": 3077, "ĠCompile": 3078, "ĠKerberoasting": 3079, "Ġtries": 3080, "ormally": 3081, "ADComputer": 3082, "prereq": 3083, "Ġactions": 3084, "ĠBookmark": 3085, "ĠAutoRun": 3086, "utions": 3087, "ĠCentOS": 3088, "365": 3089, "LOCAL": 3090, "paign": 3091, "ĠClass": 3092, "Ġguess": 3093, "ĠVBScript": 3094, "ĠModifies": 3095, "Ġtwo": 3096, "ĠPrincipal": 3097, "Ġredirection": 3098, "Ġpersistance": 3099, "ĠArbitrary": 3100, "ĠCrowdst": 3101, "Ġlooked": 3102, "ĠVirtualization": 3103, "Ġtcpdump": 3104, "Ġsaves": 3105, "Ġdesigned": 3106, "ĠSafari": 3107, "ĠEveryone": 3108, "Ġconnected": 3109, "ĠConfiguration": 3110, "Ġdecoding": 3111, "Ġproducts": 3112, "RAW": 3113, "ynamic": 3114, "Ġdestination": 3115, "ĠSIGINT": 3116, "ĠCanary": 3117, "ĠESXCLI": 3118, "ĠMailbox": 3119, "EncodedCommand": 3120, "Ġfamilies": 3121, "HINE": 3122, "MACHINE": 3123, "NAME": 3124, "poweroff": 3125, "Ġsaying": 3126, "Ġcampaign": 3127, "master": 3128, "Ġrandom": 3129, "Ġthreshold": 3130, "Ġchannel": 3131, "ĠCrowdstrike": 3132, "!\"": 3133, "%)": 3134, "600": 3135, "86": 3136, ">.": 3137, "An": 3138, "Application": 3139, "Audit": 3140, "Be": 3141, "By": 3142, "Cat": 3143, "Do": 3144, "Dec": 3145, "DAT": 3146, "It": 3147, "LS": 3148, "Launch": 3149, "Method": 3150, "MSI": 3151, "Mimikatz": 3152, "NO": 3153, "New": 3154, "Over": 3155, "Once": 3156, "PG": 3157, "Po": 3158, "Per": 3159, "Par": 3160, "Rem": 3161, "ROR": 3162, "SU": 3163, "TY": 3164, "Task": 3165, "Wor": 3166, "aut": 3167, "app": 3168, "bu": 3169, "bat": 3170, "bolic": 3171, "capture": 3172, "ds": 3173, "ee": 3174, "eg": 3175, "ele": 3176, "files": 3177, "folder": 3178, "find": 3179, "fetch": 3180, "ground": 3181, "ho": 3182, "hark": 3183, "ience": 3184, "ibrary": 3185, "linux": 3186, "lper": 3187, "ltest": 3188, "ltra": 3189, "mm": 3190, "ms": 3191, "obs": 3192, "pn": 3193, "ped": 3194, "pend": 3195, "path": 3196, "qli": 3197, "raf": 3198, "sc": 3199, "sed": 3200, "set": 3201, "sys": 3202, "system": 3203, "type": 3204, "with": 3205, "Ġ64": 3206, "ĠâĢ": 3207, "Ġtermin": 3208, "Ġturn": 3209, "Ġtickets": 3210, "Ġaffect": 3211, "erous": 3212, "oning": 3213, "hether": 3214, "helper": 3215, "Ġsti": 3216, "Ġsil": 3217, "Ġsize": 3218, "Ġswe": 3219, "rep": 3220, "isor": 3221, "isted": 3222, "isual": 3223, "tify": 3224, "ors": 3225, "led": 3226, "Ġfail": 3227, "Ġframework": 3228, "Ġword": 3229, "Ġwhether": 3230, "Ġpause": 3231, "iting": 3232, "uses": 3233, "Ġdriv": 3234, "Ġdang": 3235, "Ġbl": 3236, "Ġbot": 3237, "Ġbrows": 3238, "Ġbrowser": 3239, "map": 3240, "ictim": 3241, "Ġinv": 3242, "Ġinternet": 3243, "Ġexch": 3244, "Ġextra": 3245, "ascript": 3246, "ĠAudit": 3247, "ĠAMSI": 3248, "etails": 3249, "ĠSta": 3250, "ĠStri": 3251, "ĠSAM": 3252, "ĠScheduled": 3253, "ĠCLI": 3254, "ĠTerminal": 3255, "ĠPath": 3256, "ĠDetails": 3257, "Ġvbs": 3258, "Ġvss": 3259, "Ġvictim": 3260, "anis": 3261, "anted": 3262, "Ġnltest": 3263, "Ġreport": 3264, "Ġreference": 3265, "Ġ--": 3266, "Ġmat": 3267, "Ġmake": 3268, "Ġmin": 3269, "Ġmech": 3270, "Ġmovement": 3271, "Ġ(%": 3272, "Ġ(.": 3273, "Ġ(`": 3274, "Ġrm": 3275, "Ġrange": 3276, "ĠRest": 3277, "ĠRules": 3278, "ĠRubeus": 3279, "vert": 3280, "veral": 3281, "ially": 3282, "Ġthose": 3283, "entutl": 3284, "ami": 3285, "Ġtests": 3286, "cos": 3287, "place": 3288, "ĠMode": 3289, "ĠMach": 3290, "ĠMovement": 3291, "Ġsupp": 3292, "ĠImp": 3293, "Ġlisted": 3294, "ĠLater": 3295, "quent": 3296, "cept": 3297, "Ġproject": 3298, "Ġprotocol": 3299, "Ġhav": 3300, "ĠFull": 3301, "ĠFilter": 3302, "Ġorig": 3303, "ervisor": 3304, "ĠExample": 3305, "ĠExtract": 3306, "Ġcreating": 3307, "Ġdetect": 3308, "ĠHashes": 3309, "Ġgather": 3310, "Ġstating": 3311, "Ġstatus": 3312, "Ġstores": 3313, "ider": 3314, "idump": 3315, "ofing": 3316, "ĠBackup": 3317, "ĠValue": 3318, "ĠInform": 3319, "Ġspace": 3320, "Ġspray": 3321, "tent": 3322, "Ġshadow": 3323, "Ġshares": 3324, "ĠWeb": 3325, "ĠReg": 3326, "Ġcharacter": 3327, "ĠDetection": 3328, "ĠDetected": 3329, "Ġfilesystem": 3330, "perience": 3331, "Ġseveral": 3332, "Explorer": 3333, "Ġinstalling": 3334, "Ġshells": 3335, "ources": 3336, "sequent": 3337, "fact": 3338, "Ġsimulating": 3339, "logout": 3340, "ĠShortcut": 3341, "ĠProvid": 3342, "ĠConnection": 3343, "elnet": 3344, "ĠEnable": 3345, "Ġopening": 3346, "Ġaddition": 3347, "Program": 3348, "Ġunlock": 3349, "Ġuninstall": 3350, "Ġunlink": 3351, "Ġalread": 3352, "ypervisor": 3353, "Ġcause": 3354, "ĠModules": 3355, "Environment": 3356, "ĠStub": 3357, "Ġvalues": 3358, "Ġrequire": 3359, "Read": 3360, "Requires": 3361, "Reboot": 3362, "Regsvr": 3363, "Request": 3364, "ĠĠĠ": 3365, "Ġresources": 3366, "Ġtimeout": 3367, "004": 3368, "Ġ19": 3369, "Ġ127": 3370, "Ġchecks": 3371, "Ġenvironments": 3372, "Ġprereq": 3373, "Ġpresent": 3374, "Ġoverwrites": 3375, "Ġtarge": 3376, "Ġtarball": 3377, "Ġmanip": 3378, "Ġviewed": 3379, "uild": 3380, "tivities": 3381, "Ġsocket": 3382, "Ġspawns": 3383, "ĠHKCU": 3384, "ĠCreateProcess": 3385, "Ġauthor": 3386, "Ġauthentication": 3387, "Ġcalls": 3388, "ĠAccounts": 3389, "Ġloading": 3390, "Ġpaths": 3391, "Ġmodifies": 3392, "Ġesentutl": 3393, "ĠAuthentication": 3394, "Ġjob": 3395, "Ġutilized": 3396, "Ġstate": 3397, "ĠAdversary": 3398, "Ġperforms": 3399, "balt": 3400, "ĠSetUID": 3401, "ĠThrough": 3402, "Ġ30": 3403, "ĠRunOnce": 3404, "Ġneeded": 3405, "Ġcertain": 3406, "Ġbackup": 3407, "Ġbackdo": 3408, "ĠRedline": 3409, "ĠManagement": 3410, "lib": 3411, "default": 3412, "Ġimp": 3413, "Ġappend": 3414, "Ġactors": 3415, "ĠScreen": 3416, "Ġversions": 3417, "ĠInstallation": 3418, "Ġ2021": 3419, "Ġendpointwhen": 3420, "Ġoperating": 3421, "ĠAPT": 3422, "ĠSpec": 3423, "Ġprograms": 3424, "Ġevade": 3425, "Ġentries": 3426, "Ġretriev": 3427, "Ġretrieved": 3428, "Ġerrors": 3429, "ĠPrivate": 3430, "âĢĿ": 3431, "Logging": 3432, "Ġautomated": 3433, "Ġflags": 3434, "pray": 3435, "ecret": 3436, "Ġlateral": 3437, "Ġproperties": 3438, "Ġknow": 3439, "conf": 3440, "ĠDoH": 3441, "ĠMethods": 3442, "Append": 3443, "lsass": 3444, "Ġconnections": 3445, "AdmPwdExp": 3446, "Ġsteganograph": 3447, "ĠModification": 3448, "pecially": 3449, "Ġdirectly": 3450, "ĠEXE": 3451, "ĠRootkit": 3452, "Ġautomatically": 3453, "preload": 3454, "Ġbecause": 3455, "ĠCollection": 3456, "ĠDeny": 3457, "Ġlistening": 3458, "ĠGuest": 3459, "ĠOpera": 3460, "Cobalt": 3461, "Malicious": 3462, "miObject": 3463, "ublic": 3464, "Ġcorrelate": 3465, "Ġbatch": 3466, "ĠCalculator": 3467, "Ġreturn": 3468, "ĠEdge": 3469, "irationTime": 3470, "Ġcapability": 3471, "RegisterServer": 3472, "MacOS": 3473, "ijacking": 3474, "Ġpurposes": 3475, "entation": 3476, "Ġadvantage": 3477, "Ġassociated": 3478, "Ġrouting": 3479, "erequisites": 3480, "Ġundetected": 3481, "DATA": 3482, "Overwrite": 3483, "Paramet": 3484, "qlite": 3485, "Ġsilver": 3486, "Ġsweep": 3487, "Ġdrives": 3488, "Ġdangerous": 3489, "Ġexchange": 3490, "ĠStrike": 3491, "Ġvssadmin": 3492, "Ġmechanis": 3493, "ĠLateral": 3494, "Ġhaving": 3495, "Ġoriginal": 3496, "ĠInformed": 3497, "ĠProvider": 3498, "Ġalready": 3499, "ĠStubPath": 3500, "AdmPwdExpirationTime": 3501, "Ġsteganography": 3502, "\"),": 3503, "',": 3504, ")-": 3505, "*\"": 3506, "/.": 3507, "20": 3508, "22": 3509, "38": 3510, "39": 3511, "59": 3512, "76": 3513, "821": 3514, "AF": 3515, "Al": 3516, "Binary": 3517, "Brute": 3518, "Browser": 3519, "CC": 3520, "Cl": 3521, "Check": 3522, "CMD": 3523, "DL": 3524, "Download": 3525, "DON": 3526, "FA": 3527, "Folder": 3528, "GID": 3529, "Global": 3530, "GPP": 3531, "Host": 3532, "Hidden": 3533, "History": 3534, "HPowerShell": 3535, "Handler": 3536, "Imp": 3537, "Job": 3538, "LD": 3539, "LY": 3540, "Mp": 3541, "Mshta": 3542, "NK": 3543, "On": 3544, "Office": 3545, "PE": 3546, "PT": 3547, "Pl": 3548, "Priv": 3549, "Policy": 3550, "Persistent": 3551, "Parent": 3552, "PRO": 3553, "PDATA": 3554, "QL": 3555, "RI": 3556, "Ro": 3557, "RAP": 3558, "RDP": 3559, "Rundll": 3560, "ROM": 3561, "RDON": 3562, "SL": 3563, "SSH": 3564, "SAT": 3565, "Snake": 3566, "SQL": 3567, "TS": 3568, "Tun": 3569, "Text": 3570, "TRL": 3571, "UT": 3572, "Up": 3573, "Ubuntu": 3574, "Will": 3575, "Zip": 3576, "``": 3577, "ax": 3578, "action": 3579, "aptures": 3580, "aible": 3581, "ailed": 3582, "bi": 3583, "bt": 3584, "bang": 3585, "binary": 3586, "based": 3587, "butions": 3588, "cer": 3589, "cre": 3590, "cro": 3591, "dd": 3592, "dis": 3593, "dec": 3594, "dat": 3595, "eper": 3596, "flow": 3597, "gn": 3598, "gent": 3599, "ium": 3600, "iases": 3601, "just": 3602, "ker": 3603, "king": 3604, "kflow": 3605, "limited": 3606, "mut": 3607, "nu": 3608, "notepad": 3609, "oice": 3610, "pol": 3611, "pwn": 3612, "powershell": 3613, "pwd": 3614, "rm": 3615, "rror": 3616, "sk": 3617, "sec": 3618, "shell": 3619, "sent": 3620, "spo": 3621, "slook": 3622, "task": 3623, "tty": 3624, "uff": 3625, "vis": 3626, "vbs": 3627, "window": 3628, "who": 3629, "yer": 3630, "ykatz": 3631, "Ġ[": 3632, "Ġed": 3633, "Ġign": 3634, "Ġetc": 3635, "Ġide": 3636, "Ġtxt": 3637, "Ġtty": 3638, "Ġtamper": 3639, "Ġtelnet": 3640, "ints": 3641, "inder": 3642, "information": 3643, "Ġable": 3644, "once": 3645, "hebang": 3646, "Ġsign": 3647, "Ġsave": 3648, "Ġsecure": 3649, "Ġsecret": 3650, "rend": 3651, "reak": 3652, "tegr": 3653, "ise": 3654, "tice": 3655, "tickets": 3656, "oring": 3657, "ories": 3658, "ortable": 3659, "orAdmin": 3660, "lease": 3661, "leAss": 3662, "Ġfut": 3663, "Ġfinal": 3664, "Ġfailed": 3665, "Ġwere": 3666, "Ġwindow": 3667, "exploitation": 3668, "Ġpam": 3669, "Ġpop": 3670, "Ġpull": 3671, "Ġpython": 3672, "Ġparent": 3673, "using": 3674, "used": 3675, "Ġds": 3676, "Ġdist": 3677, "Ġdia": 3678, "enu": 3679, "Ġbet": 3680, "Ġbits": 3681, "Ġbreak": 3682, "man": 3683, "mari": 3684, "Ġusage": 3685, "root": 3686, "Ġinvoke": 3687, "Ġintent": 3688, "Ġexcel": 3689, "arge": 3690, "Ġocc": 3691, "lood": 3692, "ĠAF": 3693, "ĠASR": 3694, "etri": 3695, "ĠSup": 3696, "ĠSchedule": 3697, "ĠSPN": 3698, "ĠShebang": 3699, "als": 3700, "alNo": 3701, "alaible": 3702, "ĠCall": 3703, "ĠCore": 3704, "ĠCurrent": 3705, "ĠCron": 3706, "ĠCertificate": 3707, "ĠCaptures": 3708, "ĠTim": 3709, "ĠTRAP": 3710, "uts": 3711, "ĠPROM": 3712, "ĠDD": 3713, "tact": 3714, "ulated": 3715, "any": 3716, "anning": 3717, "ansi": 3718, "Ġnext": 3719, "Ġnix": 3720, "odhelper": 3721, "Ġreal": 3722, "estomp": 3723, "river": 3724, "ributions": 3725, "Ġmacro": 3726, "ĠETW": 3727, "ily": 3728, "iler": 3729, "ĠRSAT": 3730, "olden": 3731, "verify": 3732, "ponse": 3733, "plays": 3734, "ĠMimikatz": 3735, "ĠMenu": 3736, "Ġsubs": 3737, "ĠISO": 3738, "ĠItems": 3739, "ĠITS": 3740, "cture": 3741, "Ġlinux": 3742, "Ġlink": 3743, "ceed": 3744, "Ġcontroll": 3745, "Ġconduct": 3746, "Ġcontext": 3747, "Ġconstru": 3748, "Ġcontact": 3749, "Ġproof": 3750, "Ġproceed": 3751, "chown": 3752, "chmod": 3753, "chive": 3754, "Ġhint": 3755, "Ġhive": 3756, "Ġuserinit": 3757, "ĠFolders": 3758, "Ġadfind": 3759, "ember": 3760, "Ġdisplays": 3761, "ĠExperience": 3762, "keeper": 3763, "Ġ\"`": 3764, "Ġdetected": 3765, "stat": 3766, "ĠPowerCLI": 3767, "dentif": 3768, "ĠHijacking": 3769, "state": 3770, "itySup": 3771, "ĠGnu": 3772, "Ġgets": 3773, "Ġgiv": 3774, "calc": 3775, "Ġactivities": 3776, "ĠBase": 3777, "ĠBind": 3778, "ĠBinary": 3779, "ĠBPF": 3780, "ĠDisplay": 3781, "check": 3782, "forced": 3783, "Ġcannot": 3784, "ĠCreating": 3785, "ĠVersion": 3786, "ĠVisual": 3787, "Ġdomaininformation": 3788, "ĠNO": 3789, "ĠName": 3790, "ĠNormally": 3791, "ĠIns": 3792, "ĠInter": 3793, "ĠInput": 3794, "ĠInformation": 3795, "ĠInfo": 3796, "ĠInternet": 3797, "ĠInTun": 3798, "ĠOnce": 3799, "ĠOLE": 3800, "Ġshuts": 3801, "ĠThey": 3802, "ouble": 3803, "ĠWor": 3804, "ĠWill": 3805, "ĠWires": 3806, "ĠRegsvr": 3807, "ĠReader": 3808, "Ġchoice": 3809, "ĠDefault": 3810, "ĠDeploy": 3811, "trokes": 3812, "plem": 3813, "aunches": 3814, "acy": 3815, "acing": 3816, "activate": 3817, "aconing": 3818, "Ġroles": 3819, "oken": 3820, "Ġtimer": 3821, "bserver": 3822, "logoff": 3823, "logger": 3824, "ĠShow": 3825, "ĠProcDump": 3826, "Ġhosts": 3827, "Ġhostname": 3828, "Internet": 3829, "Ġopens": 3830, "Ġuncommon": 3831, "Ġunregister": 3832, "Ġalter": 3833, "ĠCharacter": 3834, "Ġcake": 3835, "Ġoutputting": 3836, "ressed": 3837, "Ġkeylogger": 3838, "Ġkill": 3839, "Ġkerb": 3840, "Ġtransi": 3841, "Ġprivesc": 3842, "rupt": 3843, "ĠStomp": 3844, "ĠStuff": 3845, "evt": 3846, "arding": 3847, "Load": 3848, "Ġscans": 3849, "filtrate": 3850, "Ġleng": 3851, "Detection": 3852, "Ġ11": 3853, "Ġdeletion": 3854, "Ġfollowed": 3855, "ffic": 3856, "eros": 3857, "Ġchecking": 3858, "APPDATA": 3859, "Ġtasklist": 3860, "Ġabuse": 3861, "Viewer": 3862, "ritory": 3863, "ĠCommandProcess": 3864, "Ġmany": 3865, "Ġmanagement": 3866, "DomainUser": 3867, "ĠJob": 3868, "Ġviewer": 3869, "Ġnotification": 3870, "Ġsessions": 3871, "Ġmessages": 3872, "Controller": 3873, "Connect": 3874, "Shutdown": 3875, "Ġpayloads": 3876, "ticular": 3877, "Ġlie": 3878, "Ġprovides": 3879, "Ġinterest": 3880, "Ġinterested": 3881, "Ġinterrupt": 3882, "Ġdisabled": 3883, "Ġparticular": 3884, "Ġpackage": 3885, "Ġlocated": 3886, "Ġbuild": 3887, "ĠAtomicTest": 3888, "ĠSetGID": 3889, "ĠQUI": 3890, "ATHPowerShell": 3891, "WMIObject": 3892, "adminctl": 3893, "Ġevents": 3894, "INET": 3895, "Ġincludes": 3896, "ĠHISTIG": 3897, "ĠHISTSIZE": 3898, "Ġchanging": 3899, "ĠChromium": 3900, "1059": 3901, "CommandLine": 3902, "like": 3903, "Ġsysadminctl": 3904, "ĠRole": 3905, "Ġloginwindow": 3906, "haviorAdmin": 3907, "Ġimplem": 3908, "ĠResponse": 3909, "1119": 3910, "akes": 3911, "Ġdrive": 3912, "Ġdrivers": 3913, "Ġshared": 3914, "Ġdatabases": 3915, "ĠKerbrute": 3916, "Ġcompressed": 3917, "Child": 3918, "ĠRemCom": 3919, "Ġgeneral": 3920, "Ġgenerate": 3921, "Ġparameters": 3922, "Ġavalaible": 3923, "Ġauditd": 3924, "ĠCommon": 3925, "ĠCommun": 3926, "Ġbehaviour": 3927, "Ġdoesn": 3928, "Compiler": 3929, "ĠPrivacy": 3930, "ĠIPv": 3931, "abilities": 3932, "âĢĻ": 3933, "Ġblocked": 3934, "ĠCompressed": 3935, "ĠEvents": 3936, "Ġassigned": 3937, "HKCU": 3938, "Ġpassed": 3939, "ĠTasks": 3940, "Ġregarding": 3941, "Ġallowing": 3942, "ĠScanning": 3943, "Trust": 3944, "Trap": 3945, "ĠXSL": 3946, "Ġextensions": 3947, "ĠNotify": 3948, "Ġconfirming": 3949, "ĠĠĠĠĠĠĠĠ": 3950, "ĠHISTFILESIZE": 3951, "Ġavailability": 3952, "concept": 3953, "commands": 3954, "ftp": 3955, "ĠAllow": 3956, "ĠstartedThe": 3957, "Ġsearch": 3958, "Ġsearching": 3959, "Ġaddresses": 3960, "Ġvulnerability": 3961, "154": 3962, "Ġprimari": 3963, "Ġexpected": 3964, "ĠImagePath": 3965, "ĠOpens": 3966, "Ġtruncates": 3967, "Ġcompromise": 3968, "Ġplaces": 3969, "ookies": 3970, "Ġsteal": 3971, "ĠVMs": 3972, "Ġsending": 3973, "selves": 3974, "Ġtwice": 3975, "Ġcraf": 3976, "Ġexfiltrate": 3977, "ĠViewer": 3978, "ĠLoads": 3979, "Ġobfuscation": 3980, "PromptBe": 3981, "Ġpatches": 3982, "ĠEXIT": 3983, "ĠEvasion": 3984, "Ġhighly": 3985, "Compressing": 3986, "Autom": 3987, "bpfN": 3988, "Ġterritory": 3989, "ĠGraph": 3990, "ĠManipulate": 3991, "ĠManipulation": 3992, "USERPRO": 3993, "Cache": 3994, "HISTFILE": 3995, "metric": 3996, "Ġpotential": 3997, "ĠSpoofing": 3998, "ĠDllRegisterServer": 3999, "Ġmarks": 4000, "ĠReconnaissance": 4001, "Ġdeployment": 4002, "ĠGeneral": 4003, "ĠContainer": 4004, "Ġtransfer": 4005, "Preference": 4006, "compress": 4007, "Ġvaultcmd": 4008, "Ġcombination": 4009, "Ġremov": 4010, "cheduler": 4011, "DomainGroup": 4012, "Ġpossible": 4013, "ĠPrivileged": 4014, "NORE": 4015, "Permission": 4016, "Remove": 4017, "Workflow": 4018, "egalNo": 4019, "Ġboth": 4020, "Ġbrowsers": 4021, "ĠStandard": 4022, "ĠMachine": 4023, "Ġadditional": 4024, "Programs": 4025, "Ġbackdoor": 4026, "Ġimperson": 4027, "Parameter": 4028, "Ġmechanism": 4029, "Alternate": 4030, "DLP": 4031, "MpPreference": 4032, "RDONLY": 4033, "mutable": 4034, "sentPromptBe": 4035, "spool": 4036, "slookup": 4037, "visudo": 4038, "Ġidea": 4039, "tegrity": 4040, "leAssignment": 4041, "Ġfuture": 4042, "Ġdistributions": 4043, "Ġdialog": 4044, "ĠCronJob": 4045, "ĠPROMPT": 4046, "Ġsubscription": 4047, "Ġconstructor": 4048, "itySupported": 4049, "ĠGnuPG": 4050, "Ġgiven": 4051, "ĠInTune": 4052, "ĠWireshark": 4053, "Ġuncommonly": 4054, "Ġkerberos": 4055, "Ġtransient": 4056, "ĠStomps": 4057, "ĠStuffing": 4058, "Ġlength": 4059, "ĠCommandProcessor": 4060, "ĠQUIC": 4061, "ATHPowerShellCommandLine": 4062, "ĠHISTIGNORE": 4063, "ChildItem": 4064, "ĠCommunitySupported": 4065, "Ġprimarily": 4066, "USERPROFILE": 4067, "egalNotice": 4068, "sentPromptBehaviorAdmin": 4069, "ATHPowerShellCommandLineParameter": 4070, "#{": 4071, "(-": 4072, ",,": 4073, "/$": 4074, "28": 4075, "56": 4076, "70": 4077, "99": 4078, ":$": 4079, "AS": 4080, "ADS": 4081, "Bo": 4082, "Basic": 4083, "Build": 4084, "CD": 4085, "CI": 4086, "Code": 4087, "CAP": 4088, "CON": 4089, "Craf": 4090, "Cookies": 4091, "DO": 4092, "DQ": 4093, "DR": 4094, "Dut": 4095, "Dynamic": 4096, "ES": 4097, "FS": 4098, "Filter": 4099, "GT": 4100, "Go": 4101, "Gop": 4102, "Har": 4103, "Hel": 4104, "IF": 4105, "IO": 4106, "Ke": 4107, "LAM": 4108, "ME": 4109, "MS": 4110, "Me": 4111, "Min": 4112, "Map": 4113, "Make": 4114, "NU": 4115, "Name": 4116, "Phis": 4117, "Pass": 4118, "PSI": 4119, "PRE": 4120, "Rest": 4121, "Rule": 4122, "SE": 4123, "Ste": 4124, "Sim": 4125, "Session": 4126, "Sync": 4127, "Stage": 4128, "Spray": 4129, "Th": 4130, "Tor": 4131, "Temp": 4132, "TCP": 4133, "TRO": 4134, "TTY": 4135, "UH": 4136, "VNC": 4137, "VCI": 4138, "Wh": 4139, "Write": 4140, "WOR": 4141, "XLL": 4142, "XCertificate": 4143, "\\<": 4144, "_.": 4145, "_*.": 4146, "access": 4147, "aScript": 4148, "acos": 4149, "affic": 4150, "be": 4151, "bil": 4152, "back": 4153, "base": 4154, "brute": 4155, "badmin": 4156, "cA": 4157, "cle": 4158, "cpl": 4159, "cated": 4160, "case": 4161, "card": 4162, "cument": 4163, "cale": 4164, "corre": 4165, "db": 4166, "data": 4167, "ef": 4168, "een": 4169, "fx": 4170, "ful": 4171, "gin": 4172, "gation": 4173, "io": 4174, "ier": 4175, "iod": 4176, "ited": 4177, "ivid": 4178, "jected": 4179, "la": 4180, "ln": 4181, "lbin": 4182, "ml": 4183, "mx": 4184, "mem": 4185, "mst": 4186, "no": 4187, "np": 4188, "none": 4189, "oted": 4190, "oves": 4191, "pe": 4192, "px": 4193, "ping": 4194, "prompt": 4195, "rv": 4196, "ras": 4197, "son": 4198, "side": 4199, "src": 4200, "sFolder": 4201, "tle": 4202, "tinu": 4203, "tds": 4204, "ua": 4205, "uk": 4206, "upl": 4207, "uid": 4208, "ugg": 4209, "ufact": 4210, "ucture": 4211, "uTTY": 4212, "vin": 4213, "web": 4214, "wanted": 4215, "wmiObject": 4216, "xls": 4217, "xml": 4218, "yy": 4219, "yle": 4220, "yDesk": 4221, "ycle": 4222, "yuk": 4223, "~/.": 4224, "ĠZ": 4225, "Ġ~/.": 4226, "Ġtit": 4227, "Ġtail": 4228, "Ġtele": 4229, "ini": 4230, "Ġact": 4231, "Ġaround": 4232, "Ġapplied": 4233, "ert": 4234, "erts": 4235, "ons": 4236, "onts": 4237, "onym": 4238, "eshell": 4239, "escription": 4240, "Ġsch": 4241, "Ġsecrets": 4242, "Ġsqlite": 4243, "reg": 4244, "req": 4245, "ista": 4246, "ished": 4247, "Ġco": 4248, "Ġcase": 4249, "orted": 4250, "Ġfo": 4251, "Ġfru": 4252, "Ġwon": 4253, "Ġwbadmin": 4254, "ndll": 4255, "ndirect": 4256, "Ġtop": 4257, "Ġtoco": 4258, "exist": 4259, "explorer": 4260, "Ġpow": 4261, "Ġpage": 4262, "Ġpoll": 4263, "Ġpolicies": 4264, "Ġpublic": 4265, "Ġpfx": 4266, "usual": 4267, "Ġdd": 4268, "Ġdue": 4269, "Ġdub": 4270, "Ġdone": 4271, "Ġdsquer": 4272, "Ġdaemon": 4273, "Ġdrop": 4274, "Ġdotnet": 4275, "Ġdupl": 4276, "enari": 4277, "owever": 4278, "Ġbu": 4279, "Ġbest": 4280, "mall": 4281, "eder": 4282, "atest": 4283, "atomic": 4284, "rol": 4285, "ross": 4286, "royer": 4287, "Ġint": 4288, "Ġinac": 4289, "Ġinternal": 4290, "Ġinjection": 4291, "Ġinstru": 4292, "Ġinjected": 4293, "Ġexection": 4294, "Ġexplo": 4295, "Ġexploit": 4296, "Ġexpor": 4297, "Ġexclusion": 4298, "arg": 4299, "arting": 4300, "arball": 4301, "arily": 4302, "Ġoptions": 4303, "lob": 4304, "loud": 4305, "ĠAs": 4306, "ĠATP": 4307, "etCache": 4308, "unted": 4309, "unks": 4310, "ĠSide": 4311, "ĠSensitive": 4312, "ĠSigned": 4313, "ĠSecrets": 4314, "ĠStit": 4315, "ĠServices": 4316, "ĠSeen": 4317, "essage": 4318, "ĠCer": 4319, "ĠCurl": 4320, "ĠCustom": 4321, "ĠCloud": 4322, "Ġexecutor": 4323, "ĠTor": 4324, "ĠTime": 4325, "ĠTCP": 4326, "ĠToken": 4327, "ĠTGT": 4328, "ĠPl": 4329, "ĠPowers": 4330, "ĠPortable": 4331, "ĠPCAP": 4332, "ĠPuTTY": 4333, "ĠDS": 4334, "ĠDec": 4335, "ĠDest": 4336, "ĠDIS": 4337, "ĠDaemon": 4338, "ĠDriver": 4339, "take": 4340, "Ġvpn": 4341, "atekeeper": 4342, "Ġnc": 4343, "Ġnode": 4344, "Ġnslookup": 4345, "Ġntds": 4346, "Ġrece": 4347, "Ġrecovery": 4348, "Ġreach": 4349, "Ġreading": 4350, "Ġreview": 4351, "ĠUltra": 4352, "ads": 4353, "adows": 4354, "WinRM": 4355, "Ġfileand": 4356, "Ġmakes": 4357, "ĠElev": 4358, "ĠError": 4359, "ĠEpx": 4360, "Ġmo": 4361, "Ġmis": 4362, "Ġmicro": 4363, "Ġmonitor": 4364, "Ġonion": 4365, "Ġloop": 4366, "Ġlots": 4367, "Ġlolbin": 4368, "Ġrc": 4369, "ĠRecur": 4370, "ĠRPC": 4371, "ĠRyuk": 4372, "olution": 4373, "Ġforest": 4374, "asses": 4375, "urer": 4376, "umentation": 4377, "aming": 4378, "ĠWinRM": 4379, "Ġtesting": 4380, "cope": 4381, "plist": 4382, "ĠMake": 4383, "ĠMasquerading": 4384, "ĠMacos": 4385, "ĠMcA": 4386, "Ġsuccess": 4387, "Ġsupplied": 4388, "ĠIAM": 4389, "Ġlow": 4390, "Ġlatest": 4391, "ĠLink": 4392, "ĠLibrary": 4393, "ĠLNK": 4394, "ĠLaunches": 4395, "quence": 4396, "quired": 4397, "velo": 4398, "aintext": 4399, "Ġhide": 4400, "Ġbyte": 4401, "ĠFlags": 4402, "ĠFax": 4403, "ĠFonts": 4404, "rypted": 4405, "Ġdisables": 4406, "Ġdiscard": 4407, "ird": 4408, "ayer": 4409, "ĠExit": 4410, "ĠExternal": 4411, "ĠExtension": 4412, "keep": 4413, "Ġ\"%": 4414, "Ġdepend": 4415, "Ġdevelo": 4416, "ĠPowerPo": 4417, "dentity": 4418, "Ġlogout": 4419, "station": 4420, "ared": 4421, "ĠGA": 4422, "ĠGo": 4423, "ĠGCP": 4424, "ĠGatekeeper": 4425, "Ġgzip": 4426, "Ġgpg": 4427, "Ġgrep": 4428, "gistration": 4429, "ShellStartup": 4430, "ctions": 4431, "Ġenc": 4432, "Ġengine": 4433, "Ġenabling": 4434, "ĠUsage": 4435, "lymp": 4436, "Ġufw": 4437, "atalog": 4438, "Ġever": 4439, "Ġeff": 4440, "Ġacross": 4441, "ĠBe": 4442, "ĠBut": 4443, "ipher": 4444, "ĠCreation": 4445, "ĠVSS": 4446, "ĠVirus": 4447, "Ġdomains": 4448, "ĠNet": 4449, "ĠNames": 4450, "ĠNSudo": 4451, "ĠIntegrity": 4452, "ĠOr": 4453, "ĠOptions": 4454, "ĠOlymp": 4455, "Ġshred": 4456, "ĠThen": 4457, "ĠExecuting": 4458, "ough": 4459, "ĠWrite": 4460, "ĠReporting": 4461, "ĠReplace": 4462, "ĠRegistration": 4463, "ĠDebi": 4464, "tructure": 4465, "peration": 4466, "Ġsele": 4467, "Ġsequence": 4468, "ĠLock": 4469, "ĠLockBit": 4470, "blue": 4471, "Ġyear": 4472, "Export": 4473, "Example": 4474, "Exclusion": 4475, "OST": 4476, "ĠAnti": 4477, "acted": 4478, "anging": 4479, "shrc": 4480, "shred": 4481, "ĠConsole": 4482, "ĠConsentPromptBehaviorAdmin": 4483, "ĠConrol": 4484, "Ġperiod": 4485, "ĠEncry": 4486, "agne": 4487, "Ġwebserver": 4488, "Ġunit": 4489, "Ġunat": 4490, "Ġunload": 4491, "Ġunset": 4492, "Ġaccessing": 4493, "Ġaccessed": 4494, "uekeep": 4495, "index": 4496, "Creating": 4497, "STP": 4498, "Ġcauses": 4499, "ustDesk": 4500, "virus": 4501, "ĠModified": 4502, "Ġkext": 4503, "Ġtraffic": 4504, "Enforced": 4505, "book": 4506, "ername": 4507, "rundll": 4508, "ailable": 4509, "ardware": 4510, "ardDut": 4511, "Loading": 4512, "Ġwinpwn": 4513, "ĠGetObject": 4514, "Ġscanning": 4515, "grade": 4516, "Reg": 4517, "avaScript": 4518, "Ġfollows": 4519, "Ġemulates": 4520, "Ġprefetch": 4521, "Ġcurrently": 4522, "005": 4523, "0000": 4524, "Ġdeleting": 4525, "Ġtaskhost": 4526, "feren": 4527, "Ġcalculator": 4528, "Ġprerequisites": 4529, "Ġbookmark": 4530, "ansfer": 4531, "Ġdumps": 4532, "Ġdumping": 4533, "Ġmanage": 4534, "Ġmanager": 4535, "ĠJavaScript": 4536, "ĠUtility": 4537, "Ġvery": 4538, "protocol": 4539, "ĠDatabase": 4540, "ĠUserinit": 4541, "AMSI": 4542, "cluding": 4543, "Connection": 4544, "Show": 4545, "Ġauth": 4546, "Ġauthentic": 4547, "Ġcalling": 4548, "Ġprovider": 4549, "Ġlaunching": 4550, "Ġpiping": 4551, "Ġupload": 4552, "Ġinteract": 4553, "Ġparts": 4554, "Ġpacket": 4555, "Ġdecre": 4556, "Ġdecrypt": 4557, "Ġdecrypted": 4558, "ĠSetup": 4559, "ensive": 4560, "ĠRuns": 4561, "urlca": 4562, "Ġprevents": 4563, "FILENAME": 4564, "INetCache": 4565, "Ġtypes": 4566, "Ġfinds": 4567, "Ġbackground": 4568, "1027": 4569, "lient": 4570, "ĠUnwanted": 4571, "ĠUnusual": 4572, "ĠWMIC": 4573, "ĠProcesses": 4574, "Ġembedding": 4575, "Ġimport": 4576, "ĠResource": 4577, "ToAtomic": 4578, "ToAss": 4579, "akbot": 4580, "akness": 4581, "Ġthemselves": 4582, "Ġclears": 4583, "Ġcleartext": 4584, "Ġlocking": 4585, "Ġencryption": 4586, "Ġcompression": 4587, "Ġ2022": 4588, "Running": 4589, "svchost": 4590, "Ġpointer": 4591, "Ġoperator": 4592, "Ġoperations": 4593, "ĠSpray": 4594, "Ġrestore": 4595, "Ġrestarted": 4596, "ĠRemoves": 4597, "Ġgenerally": 4598, "Ġeven": 4599, "Ġevading": 4600, "Ġkeystrokes": 4601, "Ġtimestamps": 4602, "Ġauditpol": 4603, "ĠComputers": 4604, "ĠListPl": 4605, "ĠBlackCat": 4606, "ĠAttempts": 4607, "ĠAttempting": 4608, "Ġworkstation": 4609, "ĠAlso": 4610, "SharpHound": 4611, "Ġquerying": 4612, "AtomicService": 4613, "AtomicTest": 4614, "ANG": 4615, "Ġblocks": 4616, "uncate": 4617, "Ġstrings": 4618, "Ġundertake": 4619, "Ġpasses": 4620, "Ġinfras": 4621, "Ġregular": 4622, "ĠMalicious": 4623, "Module": 4624, "PasswordSpray": 4625, "Trail": 4626, "ĠXML": 4627, "ĠAppend": 4628, "Ġproperly": 4629, "ĠNotification": 4630, "Ġconfirms": 4631, "ERROR": 4632, "config": 4633, "ymbolic": 4634, "ĠDocker": 4635, "ĠDocument": 4636, "Ġelevation": 4637, "Ġsearched": 4638, "Ġleverages": 4639, "Ġappearance": 4640, "360": 4641, "AppData": 4642, "LOAD": 4643, "ctively": 4644, "horized": 4645, "ĠPayloads": 4646, "Ġmailbox": 4647, "ĠStops": 4648, "Ġtemporarily": 4649, "ooks": 4650, "ĠClipboard": 4651, "Ġmasquerading": 4652, "Ġguest": 4653, "Ġsends": 4654, "Ġobtained": 4655, "Ġupdate": 4656, "Opened": 4657, "Ġexfiltrated": 4658, "Ġexfiltrating": 4659, "ĠPrint": 4660, "Ġredirect": 4661, "otentially": 4662, "ĠHelper": 4663, "Ġcompiled": 4664, "Ġobfuscate": 4665, "Ġobfuscated": 4666, "5535": 4667, "Print": 4668, "Ġ=>": 4669, "Ġcrond": 4670, "Ġpatched": 4671, "Ġdirectories": 4672, "ĠEvade": 4673, "Ġensures": 4674, "ĠOnly": 4675, "ARI": 4676, "Allow": 4677, "Author": 4678, "PFXCertificate": 4679, "WebGlobal": 4680, "viewer": 4681, "Ġbecome": 4682, "Ġindivid": 4683, "ĠCollect": 4684, "ĠDenied": 4685, "Ġconsider": 4686, "strumentation": 4687, "ĠGuardDut": 4688, "ĠOperation": 4689, "ĠSharpHound": 4690, "Ġspooler": 4691, "168": 4692, "Caution": 4693, "CimMethod": 4694, "metry": 4695, "nnnn": 4696, "Ġswap": 4697, "Ġswitch": 4698, "ĠpowerSQL": 4699, "Ġpotentially": 4700, "ĠSpool": 4701, "ĠSessionGop": 4702, "ĠTransfer": 4703, "Ġmeans": 4704, "Ġantivirus": 4705, "ĠGeneric": 4706, "123": 4707, "444": 4708, "505": 4709, "EventLog": 4710, "PUA": 4711, "Screen": 4712, "phone": 4713, "torage": 4714, "wards": 4715, "Ġdenied": 4716, "Ġdenial": 4717, "Ġbenign": 4718, "Ġexclude": 4719, "Ġexcluded": 4720, "ĠEspecially": 4721, "Ġhandled": 4722, "Providers": 4723, "Ġreconnaissance": 4724, "ĠAutomation": 4725, "Ġguesses": 4726, "Ġguessing": 4727, "Decode": 4728, "SUDO": 4729, "apping": 4730, "bug": 4731, "mmyy": 4732, "ĠâĢľ": 4733, "Ġstill": 4734, "Ġbluekeep": 4735, "Ġextraction": 4736, "Ġmatching": 4737, "ĠRestore": 4738, "Ġsupported": 4739, "ĠConnections": 4740, "Ġ1970": 4741, "Ġtargeted": 4742, "Ġauthors": 4743, "ĠScreenConnect": 4744, "BrowserPass": 4745, "Classes": 4746, "Privile": 4747, "secdump": 4748, "tasks": 4749, "Ġignore": 4750, "Ġtampering": 4751, "Ġdscl": 4752, "Ġbitsadmin": 4753, "Ġoccur": 4754, "loodHound": 4755, "ĠSupport": 4756, "ĠSPNs": 4757, "ĠTimestomp": 4758, "verifyctl": 4759, "Ġcontrollers": 4760, "ĠInterface": 4761, "ĠWorld": 4762, "Loadable": 4763, "Ġimplemented": 4764, "Automated": 4765, "Ġimpersonating": 4766, "AlternateShellStartup": 4767, "Box": 4768, "CONTRO": 4769, "Crafting": 4770, "Helper": 4771, "Keys": 4772, "MeIn": 4773, "PSImage": 4774, "PRELOAD": 4775, "Restart": 4776, "bruteforce": 4777, "nolog": 4778, "ufacturer": 4779, "vinject": 4780, "Ġtailor": 4781, "Ġtelemetry": 4782, "onymous": 4783, "Ġschtasks": 4784, "Ġtocopy": 4785, "existing": 4786, "Ġpoweshell": 4787, "Ġpollute": 4788, "Ġdubbed": 4789, "Ġdsquery": 4790, "enarios": 4791, "Ġbestarted": 4792, "Ġinstructions": 4793, "Ġexploited": 4794, "Ġexports": 4795, "ĠStitch": 4796, "ĠTCPdump": 4797, "ĠDestroyer": 4798, "ĠDISM": 4799, "adowstorage": 4800, "ĠElevation": 4801, "ĠEpxplorer": 4802, "Ġmicrophone": 4803, "ĠRecursively": 4804, "Ġdiscarded": 4805, "ĠPowerPoint": 4806, "Ġeffec": 4807, "ipheral": 4808, "ĠOlympic": 4809, "ĠDebian": 4810, "ĠEncrypted": 4811, "Ġtaskhostw": 4812, "urlcache": 4813, "ToAtomicsFolder": 4814, "ToAssist": 4815, "ĠListPlanting": 4816, "Ġinfrastructure": 4817, "WebGlobalModule": 4818, "Ġindividual": 4819, "ĠGuardDuty": 4820, "ĠSessionGopher": 4821, "BrowserPassView": 4822, "CONTROL": 4823, "!`": 4824, "!).": 4825, "!\".": 4826, "\").": 4827, "$_.": 4828, "'.": 4829, "):": 4830, "**": 4831, "++": 4832, "/*": 4833, "/<": 4834, "/{": 4835, "011": 4836, "050": 4837, "13": 4838, "17": 4839, "30": 4840, "31": 4841, "364": 4842, "340": 4843, "45": 4844, "545": 4845, "60": 4846, "65": 4847, "74": 4848, "80": 4849, "90": 4850, "98": 4851, "9600": 4852, "::": 4853, ">[": 4854, ">\\\\": 4855, ">/<": 4856, "?{": 4857, "Ac": 4858, "Ar": 4859, "Az": 4860, "ASH": 4861, "Anti": 4862, "Agent": 4863, "Bron": 4864, "Based": 4865, "Black": 4866, "BLD": 4867, "BCD": 4868, "BloodHound": 4869, "CH": 4870, "Cap": 4871, "CSh": 4872, "Curl": 4873, "Capture": 4874, "Cleanup": 4875, "CTRL": 4876, "Client": 4877, "Dev": 4878, "EO": 4879, "EW": 4880, "ELinux": 4881, "ESS": 4882, "Files": 4883, "Finder": 4884, "GA": 4885, "GON": 4886, "GUID": 4887, "HT": 4888, "He": 4889, "Hu": 4890, "Hook": 4891, "HVCI": 4892, "However": 4893, "Ids": 4894, "Identif": 4895, "Indirect": 4896, "JScript": 4897, "La": 4898, "Library": 4899, "LegalNotice": 4900, "LANG": 4901, "MC": 4902, "MO": 4903, "Mic": 4904, "Mode": 4905, "Micro": 4906, "Mag": 4907, "Mcs": 4908, "Member": 4909, "Mapping": 4910, "NF": 4911, "Nin": 4912, "Node": 4913, "NSI": 4914, "NON": 4915, "OL": 4916, "Ob": 4917, "Operation": 4918, "OGON": 4919, "PR": 4920, "Pn": 4921, "Pad": 4922, "Pip": 4923, "PEn": 4924, "Persistence": 4925, "Python": 4926, "Publ": 4927, "Public": 4928, "Please": 4929, "Qu": 4930, "Quer": 4931, "Red": 4932, "Recur": 4933, "RRE": 4934, "RAND": 4935, "RROR": 4936, "Retri": 4937, "SM": 4938, "SV": 4939, "Se": 4940, "Sn": 4941, "Sv": 4942, "Sx": 4943, "Sta": 4944, "Send": 4945, "Section": 4946, "SAM": 4947, "Sensitive": 4948, "Successf": 4949, "Smb": 4950, "Secure": 4951, "Services": 4952, "Scope": 4953, "TR": 4954, "Turl": 4955, "Team": 4956, "Thing": 4957, "UA": 4958, "UP": 4959, "UDP": 4960, "UPX": 4961, "URL": 4962, "UUID": 4963, "Ultra": 4964, "URI": 4965, "Virus": 4966, "VARI": 4967, "War": 4968, "WLL": 4969, "Word": 4970, "WerFault": 4971, "WCM": 4972, "WmiObject": 4973, "XLAM": 4974, "YMO": 4975, "YSV": 4976, "Zagne": 4977, "\\.": 4978, "\\`": 4979, "\\..": 4980, "_<": 4981, "`\").": 4982, "az": 4983, "ati": 4984, "air": 4985, "aiting": 4986, "bf": 4987, "bon": 4988, "bers": 4989, "bour": 4990, "bel": 4991, "buil": 4992, "bde": 4993, "backup": 4994, "build": 4995, "cf": 4996, "cw": 4997, "cing": 4998, "can": 4999, "cur": 5000, "cent": 5001, "cure": 5002, "cord": 5003, "custom": 5004, "cmst": 5005, "dr": 5006, "dia": 5007, "dot": 5008, "dir": 5009, "dcl": 5010, "dinal": 5011, "event": 5012, "eigh": 5013, "eps": 5014, "etit": 5015, "fd": 5016, "fix": 5017, "flags": 5018, "fee": 5019, "fodhelper": 5020, "gt": 5021, "gz": 5022, "gic": 5023, "gro": 5024, "gid": 5025, "group": 5026, "global": 5027, "grep": 5028, "glib": 5029, "gIds": 5030, "hi": 5031, "hl": 5032, "has": 5033, "hta": 5034, "hunt": 5035, "home": 5036, "hider": 5037, "hRule": 5038, "ib": 5039, "ie": 5040, "iw": 5041, "iet": 5042, "iate": 5043, "ja": 5044, "jscript": 5045, "kill": 5046, "kub": 5047, "kurl": 5048, "kCleanup": 5049, "lic": 5050, "licious": 5051, "last": 5052, "mes": 5053, "mor": 5054, "med": 5055, "mend": 5056, "microsoft": 5057, "mutil": 5058, "new": 5059, "nown": 5060, "numer": 5061, "nel": 5062, "nap": 5063, "oT": 5064, "osoft": 5065, "overy": 5066, "object": 5067, "oined": 5068, "ocation": 5069, "oca": 5070, "oClient": 5071, "par": 5072, "pid": 5073, "pple": 5074, "pired": 5075, "purpo": 5076, "rf": 5077, "row": 5078, "rules": 5079, "rbt": 5080, "sf": 5081, "sor": 5082, "ske": 5083, "ssh": 5084, "size": 5085, "sub": 5086, "slock": 5087, "sadmin": 5088, "sensitive": 5089, "sbin": 5090, "scp": 5091, "successful": 5092, "sres": 5093, "spec": 5094, "secrets": 5095, "sutil": 5096, "sascript": 5097, "sqlite": 5098, "sHidden": 5099, "sftp": 5100, "symbolic": 5101, "tz": 5102, "this": 5103, "treq": 5104, "uic": 5105, "uction": 5106, "uick": 5107, "vt": 5108, "ving": 5109, "ven": 5110, "vul": 5111, "vest": 5112, "vious": 5113, "vive": 5114, "vPubl": 5115, "wine": 5116, "wud": 5117, "wav": 5118, "wBypass": 5119, "wful": 5120, "wsf": 5121, "xim": 5122, "xwn": 5123, "xcl": 5124, "your": 5125, "ylib": 5126, "yTurl": 5127, "ze": 5128, "zone": 5129, "})": 5130, "Ġ{": 5131, "Ġ\\\"": 5132, "Ġ#{": 5133, "Ġ90": 5134, "Ġ?{": 5135, "Ġtun": 5136, "Ġtable": 5137, "Ġtables": 5138, "Ġteam": 5139, "Ġtell": 5140, "Ġtrend": 5141, "Ġtakes": 5142, "ince": 5143, "inting": 5144, "inEn": 5145, "info": 5146, "insing": 5147, "inite": 5148, "inyTurl": 5149, "Ġaid": 5150, "eria": 5151, "erify": 5152, "error": 5153, "only": 5154, "estion": 5155, "Ġsur": 5156, "Ġsent": 5157, "Ġsite": 5158, "Ġsmb": 5159, "Ġschedul": 5160, "Ġsftp": 5161, "Ġsmall": 5162, "Ġsdcl": 5163, "rell": 5164, "reach": 5165, "reboot": 5166, "reporting": 5167, "tex": 5168, "teal": 5169, "team": 5170, "tie": 5171, "tial": 5172, "tical": 5173, "tity": 5174, "tifact": 5175, "Ġcor": 5176, "Ġcri": 5177, "Ġcore": 5178, "Ġcard": 5179, "Ġcrit": 5180, "Ġcpassword": 5181, "Ġcsc": 5182, "Ġccmst": 5183, "oration": 5184, "orage": 5185, "llection": 5186, "leak": 5187, "leObject": 5188, "Ġfill": 5189, "Ġfac": 5190, "Ġfreebsd": 5191, "Ġfetch": 5192, "Ġfolders": 5193, "Ġfeder": 5194, "Ġfsutil": 5195, "Ġfinite": 5196, "Ġwip": 5197, "Ġways": 5198, "Ġwaiting": 5199, "Ġwsres": 5200, "ecess": 5201, "ecEdit": 5202, "omration": 5203, "ommend": 5204, "ingServer": 5205, "excluding": 5206, "expired": 5207, "Ġpus": 5208, "Ġpem": 5209, "Ġpyp": 5210, "Ġpcw": 5211, "Ġpkill": 5212, "ittle": 5213, "ittie": 5214, "usr": 5215, "users": 5216, "usted": 5217, "username": 5218, "Ġded": 5219, "Ġdro": 5220, "Ġdir": 5221, "Ġdesk": 5222, "Ġdemon": 5223, "Ġdouble": 5224, "Ġdmes": 5225, "enc": 5226, "eness": 5227, "enum": 5228, "enable": 5229, "ename": 5230, "encry": 5231, "enumeration": 5232, "enses": 5233, "enough": 5234, "Ġbz": 5235, "Ġbun": 5236, "Ġblob": 5237, "making": 5238, "malicious": 5239, "ical": 5240, "icates": 5241, "icated": 5242, "icator": 5243, "edit": 5244, "ato": 5245, "ature": 5246, "attr": 5247, "atform": 5248, "attrib": 5249, "atson": 5250, "Ġusually": 5251, "roleAssignment": 5252, "Ġinvo": 5253, "Ġiniti": 5254, "Ġincre": 5255, "Ġincorre": 5256, "Ġinhi": 5257, "Ġexits": 5258, "aring": 5259, "arch": 5260, "arks": 5261, "arab": 5262, "arses": 5263, "arbon": 5264, "Ġour": 5265, "Ġold": 5266, "Ġodd": 5267, "Ġosk": 5268, "Ġosascript": 5269, "asing": 5270, "locale": 5271, "ĠAction": 5272, "ĠAvo": 5273, "ĠAvoid": 5274, "ĠAES": 5275, "ĠAmmyy": 5276, "ĠANON": 5277, "ĠApple": 5278, "ĠAwful": 5279, "etykatz": 5280, "ĠSw": 5281, "ĠServ": 5282, "ĠSig": 5283, "ĠSID": 5284, "ĠSub": 5285, "ĠSingle": 5286, "ĠSDelete": 5287, "ĠSeat": 5288, "ĠSUID": 5289, "ĠSudo": 5290, "ĠSna": 5291, "ĠSele": 5292, "ĠScheduler": 5293, "ĠSELinux": 5294, "ĠSYSV": 5295, "ĠSnap": 5296, "ĠSteal": 5297, "ĠSecEdit": 5298, "ali": 5299, "alid": 5300, "also": 5301, "aliases": 5302, "essages": 5303, "ĠCP": 5304, "ĠCb": 5305, "ĠCOM": 5306, "ĠCPU": 5307, "ĠCTRL": 5308, "ĠCatalog": 5309, "ĠCarbon": 5310, "Ġexecutables": 5311, "ĠTop": 5312, "ĠTou": 5313, "ĠTemp": 5314, "ĠTake": 5315, "ĠTermin": 5316, "ĠTTP": 5317, "ĠTLS": 5318, "ĠTTY": 5319, "ĠTrend": 5320, "ĠTarball": 5321, "utor": 5322, "ĠPan": 5323, "ĠPot": 5324, "ĠPup": 5325, "ĠPage": 5326, "ĠPUT": 5327, "ĠPDQ": 5328, "ĠPotentially": 5329, "ĠParses": 5330, "ĠDB": 5331, "ĠDO": 5332, "ĠDir": 5333, "ĠDirect": 5334, "ĠDcc": 5335, "ĠDotnet": 5336, "ĠDouble": 5337, "ĠDescription": 5338, "ĠDarks": 5339, "tab": 5340, "tam": 5341, "tach": 5342, "tabs": 5343, "taches": 5344, "tane": 5345, "hishing": 5346, "Ġvect": 5347, "Ġvirus": 5348, "Ġvmx": 5349, "ultane": 5350, "ants": 5351, "Ġnow": 5352, "Ġnull": 5353, "Ġnormally": 5354, "Ġneigh": 5355, "Ġngro": 5356, "Ġnecess": 5357, "odial": 5358, "Ġreco": 5359, "Ġreve": 5360, "Ġreally": 5361, "Ġrepo": 5362, "Ġrename": 5363, "Ġrevert": 5364, "Ġreactivate": 5365, "Ġreferen": 5366, "ĠUI": 5367, "ĠUp": 5368, "ĠUniqu": 5369, "ĠUDP": 5370, "ĠUmb": 5371, "ĠURI": 5372, "ĠUSE": 5373, "Ġbeaconing": 5374, "Ġbegin": 5375, "estTrust": 5376, "add": 5377, "adle": 5378, "aders": 5379, "adst": 5380, "adually": 5381, "adless": 5382, "riff": 5383, "ride": 5384, "Ġcoming": 5385, "Ġcomadmin": 5386, "Ġfileless": 5387, "Ġmacos": 5388, "Ġmaking": 5389, "Ġmavinject": 5390, "Ġmagic": 5391, "Ġmaxim": 5392, "hello": 5393, "ĠEDR": 5394, "ĠERROR": 5395, "ilit": 5396, "ility": 5397, "Ġmost": 5398, "Ġmove": 5399, "Ġmimi": 5400, "Ġmemb": 5401, "Ġmshta": 5402, "Ġmember": 5403, "Ġonto": 5404, "Ġonline": 5405, "Ġlost": 5406, "cky": 5407, "Ġ(-": 5408, "Ġ(âĢ": 5409, "Ġransom": 5410, "Ġrather": 5411, "Ġrdr": 5412, "exeUpon": 5413, "ĠRcl": 5414, "ĠRigh": 5415, "ĠRetri": 5416, "ĠRustDesk": 5417, "ĠRBCD": 5418, "ĠRename": 5419, "olang": 5420, "olves": 5421, "iamor": 5422, "Ġforfiles": 5423, "Ġforcing": 5424, "ifi": 5425, "ifice": 5426, "Ġthing": 5427, "Ġthan": 5428, "Ġthird": 5429, "Ġthrow": 5430, "urning": 5431, "umed": 5432, "ently": 5433, "rome": 5434, "cook": 5435, "collection": 5436, "pond": 5437, "ponent": 5438, "plate": 5439, "plants": 5440, "ĠMag": 5441, "ĠMust": 5442, "ĠMorer": 5443, "ĠMSO": 5444, "ĠMimi": 5445, "ĠMFA": 5446, "ĠMini": 5447, "ĠMessage": 5448, "ĠItem": 5449, "ĠICM": 5450, "ĠIME": 5451, "ĠIdentity": 5452, "ĠINF": 5453, "ĠIoT": 5454, "ĠIsHidden": 5455, "ctop": 5456, "Ġlim": 5457, "Ġland": 5458, "Ġlines": 5459, "Ġlimited": 5460, "Ġlarge": 5461, "ĠLong": 5462, "ĠLeve": 5463, "ĠLever": 5464, "ĠLarge": 5465, "ĠLegalNotice": 5466, "ĠLUH": 5467, "ĠLOGON": 5468, "ĠLSM": 5469, "ĠLittle": 5470, "quality": 5471, "quoted": 5472, "Ġconce": 5473, "Ġprotected": 5474, "Ġproced": 5475, "Ġprofiles": 5476, "Ġprocf": 5477, "veigh": 5478, "imic": 5479, "imgr": 5480, "immutable": 5481, "chain": 5482, "chflags": 5483, "chattr": 5484, "Ġhh": 5485, "Ġhar": 5486, "Ġhta": 5487, "Ġhad": 5488, "Ġhid": 5489, "Ġhandler": 5490, "Ġhypervisor": 5491, "Ġhinder": 5492, "otes": 5493, "oting": 5494, "othold": 5495, "Ġuserenum": 5496, "ĠFTP": 5497, "ĠFeat": 5498, "ĠFramework": 5499, "ĠFodhelper": 5500, "Ġadid": 5501, "ement": 5502, "emplate": 5503, "upg": 5504, "Ġorgan": 5505, "iring": 5506, "irror": 5507, "Ġitm": 5508, "Ġatp": 5509, "ervals": 5510, "ĠExtra": 5511, "ĠExfiltrate": 5512, "keys": 5513, "Ġrunner": 5514, "Ġrunonce": 5515, "Ġrunbook": 5516, "Ġcredit": 5517, "Ġ\"*\"": 5518, "Ġdepre": 5519, "status": 5520, "ĠPowerUp": 5521, "Ġlogoff": 5522, "ĠHe": 5523, "ĠHome": 5524, "ĠHide": 5525, "ĠHello": 5526, "ĠHypervisor": 5527, "ĠHardware": 5528, "ĠHooks": 5529, "stance": 5530, "allpa": 5531, "allocation": 5532, "Ġsystemstate": 5533, "opied": 5534, "ĠGath": 5535, "ĠGID": 5536, "ĠGZip": 5537, "ĠGolden": 5538, "ĠGsecdump": 5539, "ĠGUP": 5540, "Ġgreat": 5541, "Ġglobal": 5542, "Ġgcc": 5543, "Ġgolden": 5544, "Ġstarts": 5545, "Ġstarting": 5546, "Ġenumerates": 5547, "ĠUsoClient": 5548, "lyCon": 5549, "Ġsuccessfuly": 5550, "igate": 5551, "igest": 5552, "calation": 5553, "calua": 5554, "Ġel": 5555, "Ġeas": 5556, "Ġactivate": 5557, "Ġaccord": 5558, "ĠPowerShellUpon": 5559, "ĠBASH": 5560, "ĠDiskCleanup": 5561, "Ġcancel": 5562, "ĠCreated": 5563, "ĠVB": 5564, "ĠVar": 5565, "ĠVPN": 5566, "ĠVerify": 5567, "ĠNt": 5568, "ĠNamed": 5569, "ĠNormal": 5570, "ĠNmap": 5571, "ackmap": 5572, "ĠIniti": 5573, "ĠInject": 5574, "ĠInher": 5575, "ĠInbox": 5576, "ĠInjects": 5577, "ĠInstrumentation": 5578, "ĠInveigh": 5579, "ĠOf": 5580, "ĠOption": 5581, "tenz": 5582, "Ġshows": 5583, "Ġshim": 5584, "Ġshown": 5585, "Ġshort": 5586, "Ġsharp": 5587, "Ġsharing": 5588, "ĠThese": 5589, "ĠExecuted": 5590, "Ġutilis": 5591, "Ġprocessor": 5592, "Ġ//": 5593, "ĠWe": 5594, "ĠWIN": 5595, "ĠWevt": 5596, "ĠWoca": 5597, "ĠWatson": 5598, "ĠWifi": 5599, "ĠRead": 5600, "ĠRegister": 5601, "ĠReboot": 5602, "ĠReference": 5603, "ĠRefle": 5604, "ĠRequest": 5605, "ĠRequired": 5606, "Ġsetuid": 5607, "Ġsetgid": 5608, "Ġchcp": 5609, "Ġchunks": 5610, "ĠDev": 5611, "ĠDemand": 5612, "ĠDetect": 5613, "ĠDebu": 5614, "ĠDepend": 5615, "Ġ`..": 5616, "Ġscriptlet": 5617, "ĠLook": 5618, "ĠLocation": 5619, "udp": 5620, "udTrail": 5621, "pleted": 5622, "tore": 5623, "Exit": 5624, "Extension": 5625, "Extra": 5626, "Exfiltrate": 5627, "Ġthenew": 5628, "ĠKill": 5629, "ĠKEY": 5630, "ĠKinsing": 5631, "Ġoutside": 5632, "ĠAnyDesk": 5633, "ĠAnonymous": 5634, "Ġdownloadand": 5635, "rivesc": 5636, "search": 5637, "Ġfunctional": 5638, "aces": 5639, "acls": 5640, "Ġroute": 5641, "ectl": 5642, "TheThing": 5643, "oki": 5644, "oking": 5645, "shutdown": 5646, "Ġsimulation": 5647, "Ġsimulated": 5648, "Ġpowershellsensitive": 5649, "ĠShim": 5650, "ĠShares": 5651, "ĠShadowstorage": 5652, "ĠProgram": 5653, "Ġcontained": 5654, "Ġspecial": 5655, "Ġspecifice": 5656, "ĠContrib": 5657, "ĠhostUpon": 5658, "ĠEnabling": 5659, "ĠEncrypt": 5660, "Input": 5661, "Inbox": 5662, "Internals": 5663, "Instance": 5664, "Ġweakness": 5665, "Ġconflic": 5666, "Protocol": 5667, "ProcDump": 5668, "ProgIds": 5669, "Ġunp": 5670, "Ġunable": 5671, "Ġunav": 5672, "Ġunless": 5673, "Ġunlimited": 5674, "Ġuncompress": 5675, "Ġunreach": 5676, "Ġalternative": 5677, "Ġaliases": 5678, "Ġarchive": 5679, "Ġaccessible": 5680, "Ġdocker": 5681, "Ġitem": 5682, "Ġattacking": 5683, "ĠAdmins": 5684, "Ġkmutil": 5685, "Ġkrbt": 5686, "Ġkxwn": 5687, "Ġkittie": 5688, "Ġtrad": 5689, "Ġtrace": 5690, "Enumeration": 5691, "Enabling": 5692, "bos": 5693, "aily": 5694, "eving": 5695, "evil": 5696, "evtutil": 5697, "ickbot": 5698, "ACL": 5699, "Ġwinzip": 5700, "Ġwinrar": 5701, "ĠwinPE": 5702, "Ġattempting": 5703, "Ġconfiguring": 5704, "vided": 5705, "Ġscp": 5706, "Ġscenarios": 5707, "points": 5708, "Adap": 5709, "Replace": 5710, "Reactivate": 5711, "avascript": 5712, "Ġlets": 5713, "Ġleast": 5714, "Ġleft": 5715, "Defaults": 5716, "Debug": 5717, "Ġclang": 5718, "Ġprefer": 5719, "Ġprevious": 5720, "ape": 5721, "ubPr": 5722, "Ġresearch": 5723, "Ġadmins": 5724, "Ġtimezone": 5725, "000": 5726, "003": 5727, "006": 5728, "ĠADS": 5729, "ĠAzureAD": 5730, "ĠDLLs": 5731, "Ġdelegation": 5732, "docker": 5733, "ffler": 5734, "Ġmodifying": 5735, "Ġ200": 5736, "Ġability": 5737, "Ġprctl": 5738, "Ġprinter": 5739, "puterDefaults": 5740, "Ġrootkit": 5741, "Ġtarfile": 5742, "Ġtarger": 5743, "ĠCommands": 5744, "Ġmanaging": 5745, "Ġmanufacturer": 5746, "Ġshouldn": 5747, "DomainDump": 5748, "DomainPolicy": 5749, "DomainController": 5750, "DomainTrust": 5751, "ĠJS": 5752, "ĠJscript": 5753, "ĠJobs": 5754, "tives": 5755, "tiveness": 5756, "Ġverified": 5757, "proxy": 5758, "provided": 5759, "Ġprompting": 5760, "ĠDatacent": 5761, "Ġspawned": 5762, ":\\*\"": 5763, "Ġseeing": 5764, "ProcessExit": 5765, "clude": 5766, "Config": 5767, "Shared": 5768, "biting": 5769, "Ġcreatedump": 5770, "ĠLogMeIn": 5771, "ordump": 5772, "Ġrecommend": 5773, "Ġlib": 5774, "txtto": 5775, "tificates": 5776, "Ġpipes": 5777, "Ġobjects": 5778, "Ġespecially": 5779, "Ġinteraction": 5780, "ĠAutodial": 5781, "ĠDomainController": 5782, "ĠDomainPasswordSpray": 5783, "Ġjse": 5784, "Ġjobs": 5785, "Ġjoined": 5786, "Ġparse": 5787, "Ġpackages": 5788, "marker": 5789, "ĠDownloads": 5790, "Ġperformed": 5791, "Ġconfigurations": 5792, "BASH": 5793, "ishingServer": 5794, "Ġdecoded": 5795, "ĠThere": 5796, "ĠRemotePC": 5797, "netstat": 5798, "Ġ339": 5799, "Ġ3000": 5800, "ĠQakbot": 5801, "ĠQuick": 5802, "ĠRunning": 5803, "WMIC": 5804, "WMIExec": 5805, "Ġplist": 5806, "Ġplaintext": 5807, "Ġplatform": 5808, "ĠTesting": 5809, "Ġendpoints": 5810, "bedding": 5811, "Ġtyped": 5812, "Ġtypical": 5813, "Ġneeds": 5814, "Ġinsmod": 5815, "Ġinsert": 5816, "Ġincluded": 5817, "Ġoffice": 5818, "Ġnetstat": 5819, "ĠRedirection": 5820, "ĠShareFinder": 5821, "1010": 5822, "1055": 5823, "Ġsysinternals": 5824, "Ġsyscall": 5825, "ĠSimilar": 5826, "ĠSimulating": 5827, "ĠSimultane": 5828, "ĠUnion": 5829, "Ġlsm": 5830, "ĠaccountsUpon": 5831, "ĠProcessors": 5832, "umentsWill": 5833, "Style": 5834, "afe": 5835, "Ġimported": 5836, "Ġimmutable": 5837, "Ġimmed": 5838, "Ġimplants": 5839, "ĠResize": 5840, "Installable": 5841, "Ġkernels": 5842, "1136": 5843, "GetCurrent": 5844, "Lister": 5845, "RemoteAccess": 5846, "ToHistory": 5847, "psexec": 5848, "Ġobscure": 5849, "ĠSysV": 5850, "ĠSysInternals": 5851, "Ġlockout": 5852, "Ġshareenumeration": 5853, "Additionally": 5854, "Ġtargetted": 5855, "ĠendpointUpon": 5856, "Chown": 5857, "Chmod": 5858, "Changing": 5859, "IfInstallable": 5860, "svcs": 5861, "Ġipconfig": 5862, "levated": 5863, "ĠSpace": 5864, "ĠPerl": 5865, "Ġrenew": 5866, "Ġrenaming": 5867, "Ġrestart": 5868, "Ġrestoring": 5869, "Ġsubnet": 5870, "Ġsubsequent": 5871, "Ġdefensive": 5872, "Ġdefenses": 5873, "Ġscreencapture": 5874, "ploits": 5875, "DSRM": 5876, "timer": 5877, "times": 5878, "ĠCompleted": 5879, "ĠComputerDefaults": 5880, "Compile": 5881, "Compiled": 5882, "PathToAtomicsFolder": 5883, "obfusc": 5884, "ĠPrivesc": 5885, "LocalAppData": 5886, "ĠQueries": 5887, "ANT": 5888, "comm": 5889, "ggers": 5890, "Ġ500": 5891, "Ġhex": 5892, "Ġheaders": 5893, "Ġexeuction": 5894, "ĠSearchScope": 5895, "ĠCompute": 5896, "ĠCompany": 5897, "ĠEventlog": 5898, "Ġforcefully": 5899, "Ġassign": 5900, "Ġassignment": 5901, "Ġsetspn": 5902, "ĠChanging": 5903, "Logs": 5904, "Login": 5905, "ĠLDAPSearch": 5906, "ĠLDAPDomainDump": 5907, "SecurityProviders": 5908, "Ġtriggers": 5909, "Ġpassing": 5910, "Ġpasswd": 5911, "Ġpasshunt": 5912, "Ġinfl": 5913, "Ġinfomration": 5914, "Ġnumbers": 5915, "Ġmsbuild": 5916, "Ġdiscovering": 5917, "Ġdevices": 5918, "ĠBypasses": 5919, "Ġwhose": 5920, "Ġwhoami": 5921, "ĠAttacks": 5922, "Common": 5923, "Passwords": 5924, "Truncate": 5925, "cedID": 5926, "ĠXLL": 5927, "Ġparty": 5928, "Ġextracts": 5929, "ĠAppData": 5930, "Ġvirtualization": 5931, "Ġvirtualized": 5932, "Ġproperty": 5933, "Ġgood": 5934, "fuscated": 5935, "jecting": 5936, "ĠAllTheThing": 5937, "Ġtherefore": 5938, "ĠDeletion": 5939, "Ġsearches": 5940, "Ġleverage": 5941, "Ġemptying": 5942, "processhider": 5943, "Ġvulnerabilities": 5944, "1564": 5945, "1560": 5946, "1574": 5947, "AppvPubl": 5948, "Bitsadmin": 5949, "LOTR": 5950, "ween": 5951, "weak": 5952, "Ġ46": 5953, "Ġ476": 5954, "Ġxwd": 5955, "Ġxwud": 5956, "Ġfeatures": 5957, "Ġexpire": 5958, "Ġexpect": 5959, "Ġexpired": 5960, "Ġexpiration": 5961, "ĠSMTP": 5962, "ĠEmbedding": 5963, "plicit": 5964, "ĠImageMag": 5965, "ĠFirepwd": 5966, "ĠOverwrite": 5967, "ĠOverwrites": 5968, "ĠOpenDNS": 5969, "ĠNTDSUtil": 5970, "CURRE": 5971, "crontabs": 5972, "pair": 5973, "respond": 5974, "Ġsteps": 5975, "Ġposting": 5976, "ĠClick": 5977, "ĠTeamviewer": 5978, "ĠPsSend": 5979, "Ġnumeric": 5980, "Ġreads": 5981, "Ġguid": 5982, "ĠWithout": 5983, "Administrator": 5984, "Ġescalating": 5985, "Ġzipfile": 5986, "Ġhelps": 5987, "3339": 5988, "Items": 5989, "OpenWith": 5990, "Testing": 5991, "domaininfo": 5992, "Ġcrash": 5993, "ĠbinPath": 5994, "ĠAfterwards": 5995, "ĠLoadable": 5996, "Ġvariant": 5997, "docx": 5998, "Ġestablished": 5999, "55505": 6000, "Prerequisites": 6001, "kittenz": 6002, "pdf": 6003, "Ġ*.": 6004, "Ġachieve": 6005, "Ġcrontab": 6006, "Ġpersist": 6007, "ĠArchive": 6008, "ĠCradle": 6009, "ĠCmdlets": 6010, "ĠEvil": 6011, "Ġlastlog": 6012, "ĠGPOAudit": 6013, "ĠGPORemoteAccess": 6014, "Ġensure": 6015, "Ġensuring": 6016, "ĠOnline": 6017, "ĠEncodedCommand": 6018, "Enabled": 6019, "Ġencrypts": 6020, "ĠPermissions": 6021, "timeout": 6022, "ALNU": 6023, "ARS": 6024, "Uninstall": 6025, "Unregister": 6026, "Unlimited": 6027, "WebRequest": 6028, "vanced": 6029, "Ġquiet": 6030, "Ġquestion": 6031, "Ġquotes": 6032, "Ġidle": 6033, "Ġterm": 6034, "Ġterms": 6035, "Ġsaved": 6036, "Ġpsexec": 6037, "Ġindicate": 6038, "Ġindicator": 6039, "ĠSafetykatz": 6040, "Ġregistering": 6041, "Ġlistener": 6042, "Ġconnec": 6043, "Ġconsent": 6044, "Ġconsumed": 6045, "strates": 6046, "ĠHashcat": 6047, "ĠGranting": 6048, "Expected": 6049, "sociation": 6050, "ĠSharpup": 6051, "ĠSharpweb": 6052, "ĠStreams": 6053, "Ġrequesting": 6054, "ĠLoginItem": 6055, "Ġdecodes": 6056, "Ġspoolsv": 6057, "Ġspoolvul": 6058, "1638": 6059, "40600": 6060, "Count": 6061, "CimInstance": 6062, "ForestTrust": 6063, "HISTCONTROL": 6064, "PPAM": 6065, "ScheduledTask": 6066, "WDBLD": 6067, "WDigest": 6068, "Without": 6069, "].<": 6070, "nsdump": 6071, "nscan": 6072, "ricted": 6073, "runonce": 6074, "Ġcorrect": 6075, "Ġpowerhell": 6076, "Ġdowngrade": 6077, "ĠTracing": 6078, "ĠDllUnregister": 6079, "Ġreturning": 6080, "Ġmark": 6081, "ĠEdition": 6082, "Ġmeet": 6083, "Ġgrant": 6084, "Ġgranted": 6085, "Ġgradually": 6086, "Ġstopped": 6087, "Ġstopping": 6088, "ĠVIBs": 6089, "ĠWerFaultSv": 6090, "Ġchmods": 6091, "ĠContainers": 6092, "Ġcapabilities": 6093, "Ġtransacted": 6094, "Ġadministrators": 6095, "procdump": 6096, "Ġrecently": 6097, "Ġrecorded": 6098, "ĠSpawns": 6099, "Ġtriggering": 6100, "ĠBITSAdmin": 6101, "ganographic": 6102, "CMSTP": 6103, "Cronj": 6104, "EXTE": 6105, "NTLM": 6106, "NTFS": 6107, "Support": 6108, "catTo": 6109, "called": 6110, "phine": 6111, "saver": 6112, "zeroes": 6113, "Ġ80": 6114, "Ġsuspiciousness": 6115, "Ġsymlink": 6116, "Ġsymbolic": 6117, "Ġsymmetric": 6118, "Ġclosed": 6119, "ĠcloudTrail": 6120, "Ġpods": 6121, "Ġbenef": 6122, "Ġbadpwd": 6123, "localhost": 6124, "ĠSilentlyCon": 6125, "ĠPreference": 6126, "ersonation": 6127, "Ġreplication": 6128, "Ġreplacing": 6129, "ĠEscalation": 6130, "ĠRecycle": 6131, "ĠRecovery": 6132, "ĠMSP": 6133, "ĠMonitorProcess": 6134, "Ġhandles": 6135, "Ġremoves": 6136, "Ġchowns": 6137, "DomainGPO": 6138, "ĠAutomated": 6139, "Ġbuiltins": 6140, "ĠSysinternalsProcDump": 6141, "Ġpossibil": 6142, "ĠPrivilege": 6143, "Auditing": 6144, "Docker": 6145, "Decrypt": 6146, "LSpray": 6147, "Potam": 6148, "SUCC": 6149, "auth": 6150, "authorized": 6151, "raft": 6152, "syscall": 6153, "Ġterminate": 6154, "Ġterminates": 6155, "Ġsticky": 6156, "Ġinvolves": 6157, "Ġinvoking": 6158, "Ġminutes": 6159, "Ġminidump": 6160, "ĠRestricted": 6161, "ĠImport": 6162, "ĠImpersonation": 6163, "ĠExtracting": 6164, "Ġspraying": 6165, "ĠWebBrowserPassView": 6166, "ĠRegular": 6167, "sequently": 6168, "Ġunlocked": 6169, "Ġ192": 6170, "Ġmanipulated": 6171, "Ġauthorized": 6172, "Ġappending": 6173, "ĠSpecify": 6174, "Ġretrieving": 6175, "Ġretrieval": 6176, "âĢĿ.": 6177, "âĢĿ).": 6178, "3856": 6179, "Hostname": 6180, "Import": 6181, "RoleAssignment": 6182, "```": 6183, "certutil": 6184, "disable": 6185, "decoded": 6186, "gnized": 6187, "gnupg": 6188, "shellhost": 6189, "whoami": 6190, "Ġedit": 6191, "Ġsignal": 6192, "Ġpopup": 6193, "Ġbetter": 6194, "Ġbetween": 6195, "manage": 6196, "ĠDDE": 6197, "Ġdetectedby": 6198, "dentifies": 6199, "checks": 6200, "ĠNOT": 6201, "ĠNOTE": 6202, "ĠInstead": 6203, "ĠInserts": 6204, "ĠShowUI": 6205, "evtx": 6206, "Ġdisabledin": 6207, "Ġgeneraldomaininfo": 6208, "1546": 6209, "1547": 6210, "Ġstealth": 6211, "Ġcraft": 6212, "Ġcrafts": 6213, "metrics": 6214, "ĠGeneralRecon": 6215, "compression": 6216, "Ġremoved": 6217, "DomainGroupMember": 6218, "ĠMachineGUID": 6219, "DLPAgent": 6220, "spoolsv": 6221, "Ġsubscriptions": 6222, "283339": 6223, "Filtered": 6224, "IFEO": 6225, "MSBuild": 6226, "Minidump": 6227, "PhishRule": 6228, "Steganographic": 6229, "Simulating": 6230, "What": 6231, "WORD": 6232, "before": 6233, "background": 6234, "lnk": 6235, "nprivesc": 6236, "tinue": 6237, "uggable": 6238, "ĠZone": 6239, "Ġtitle": 6240, "Ġcovert": 6241, "Ġfoothold": 6242, "Ġfruit": 6243, "Ġtopic": 6244, "Ġdropper": 6245, "Ġduplicate": 6246, "Ġbuckets": 6247, "Ġintervals": 6248, "Ġinactive": 6249, "argumentsWill": 6250, "ĠAssociation": 6251, "ĠCertain": 6252, "ĠPlayer": 6253, "ĠPowersploits": 6254, "ĠDecrypt": 6255, "Ġreaching": 6256, "ĠUltraVNC": 6257, "Ġmounted": 6258, "Ġmissing": 6259, "Ġmonitoring": 6260, "ĠMcAfee": 6261, "ĠExtensions": 6262, "ĠGoToAssist": 6263, "Ġencod": 6264, "ĠBeaconing": 6265, "ĠButter": 6266, "ĠNetsh": 6267, "ĠLockout": 6268, "OSTAP": 6269, "Ġunattend": 6270, "Ġkextload": 6271, "Ġauthenticate": 6272, "ĠAppends": 6273, "553540600": 6274, "Authorization": 6275, "Ġconsidered": 6276, "ĠSpooler": 6277, "444553540600": 6278, "Screencapture": 6279, "Privilege": 6280, "nologin": 6281, "Ġeffectiveness": 6282, "!`\")": 6283, "5452": 6284, "Arg": 6285, "AzRoleAssignment": 6286, "AntiPhishRule": 6287, "Bronze": 6288, "CHARS": 6289, "Caption": 6290, "CShadow": 6291, "EWM": 6292, "Identifier": 6293, "LaZagne": 6294, "Micosoft": 6295, "Ninja": 6296, "NSION": 6297, "Obfuscated": 6298, "PnPEn": 6299, "Pipe": 6300, "Query": 6301, "Recurse": 6302, "RANDOM": 6303, "Retrieve": 6304, "SeDebug": 6305, "Snitch": 6306, "SxS": 6307, "Successfully": 6308, "SmbMapping": 6309, "VARIANT": 6310, "Warning": 6311, "WCMDump": 6312, "YMOUS": 6313, "belt": 6314, "built": 6315, "diag": 6316, "dotm": 6317, "etitPotam": 6318, "globalstate": 6319, "glibc": 6320, "iwr": 6321, "iately": 6322, "kubectl": 6323, "kurlsa": 6324, "numeric": 6325, "purpose": 6326, "skel": 6327, "slocker": 6328, "specified": 6329, "uicy": 6330, "winevt": 6331, "wBypassUAC": 6332, "xcli": 6333, "Ġ?{$_.": 6334, "Ġtunnel": 6335, "inEnum": 6336, "inyTurla": 6337, "errorreporting": 6338, "Ġsurvive": 6339, "Ġsmbstatus": 6340, "Ġscheduling": 6341, "Ġsdclt": 6342, "rella": 6343, "Ġcorrespond": 6344, "Ġcritical": 6345, "Ġcriteria": 6346, "Ġccmstp": 6347, "leakdiag": 6348, "Ġfills": 6349, "Ġfacilit": 6350, "Ġfederated": 6351, "Ġwiper": 6352, "Ġwsreset": 6353, "Ġpushed": 6354, "Ġpypykatz": 6355, "Ġpcwutl": 6356, "Ġdedicated": 6357, "Ġdemonstrates": 6358, "Ġdmesg": 6359, "encryption": 6360, "Ġbunch": 6361, "roleAssignments": 6362, "Ġinvocation": 6363, "Ġinitial": 6364, "Ġincrease": 6365, "Ġincorrect": 6366, "Ġinhibiting": 6367, "ĠAvoslocker": 6368, "ĠANONYMOUS": 6369, "ĠAwfulshred": 6370, "ĠSigma": 6371, "ĠSeatbelt": 6372, "ĠSnaffler": 6373, "ĠSelect": 6374, "ĠSYSVOL": 6375, "ĠSnapMC": 6376, "ĠTopic": 6377, "ĠTouching": 6378, "ĠTrendMicro": 6379, "ĠPotato": 6380, "ĠPupy": 6381, "ĠDirLister": 6382, "ĠDccwBypassUAC": 6383, "ĠDotnetsearch": 6384, "ĠDarkside": 6385, "tachment": 6386, "Ġvectors": 6387, "Ġneighbour": 6388, "Ġngrok": 6389, "Ġnecessary": 6390, "Ġrecognized": 6391, "Ġreveals": 6392, "Ġreferenced": 6393, "ĠUnique": 6394, "ĠUmbrella": 6395, "Ġbegins": 6396, "adstest": 6397, "riffon": 6398, "Ġmaximum": 6399, "Ġmembers": 6400, "Ġ(âĢľ": 6401, "Ġrdrleakdiag": 6402, "ĠRclone": 6403, "ĠRights": 6404, "ĠRetrieving": 6405, "iamorphine": 6406, "cookies": 6407, "collectionto": 6408, "ĠMagic": 6409, "ĠMorerecon": 6410, "ĠMSOLSpray": 6411, "ĠMimik": 6412, "ĠMessageBox": 6413, "ĠICMP": 6414, "ĠIMEWDBLD": 6415, "ctopus": 6416, "ĠLevel": 6417, "ĠLeverage": 6418, "ĠLUHN": 6419, "ĠLittleSnitch": 6420, "Ġprocedure": 6421, "Ġprocfs": 6422, "imgrab": 6423, "ĠFeatures": 6424, "Ġadidnsdump": 6425, "Ġorganization": 6426, "Ġ\"*\"}": 6427, "Ġdeprecated": 6428, "allpaper": 6429, "Ġsystemstatebackup": 6430, "ĠGathers": 6431, "Ġaccording": 6432, "ĠNamedPipe": 6433, "ackmapexec": 6434, "ĠInitiating": 6435, "ĠInherit": 6436, "Ġsharpview": 6437, "ĠWINWORD": 6438, "ĠWevtUtil": 6439, "ĠWocao": 6440, "ĠReflectively": 6441, "ĠDebugger": 6442, "ĠDepending": 6443, "Extraction": 6444, "ĠContributor": 6445, "Ġconflict": 6446, "ProtocolHandler": 6447, "Ġunavailable": 6448, "Ġunreachable": 6449, "Ġkrbtgt": 6450, "ĠwinPEAS": 6451, "Adapted": 6452, "Ġpreviously": 6453, "ubPrn": 6454, "Ġprintercheck": 6455, "ĠDatacenter": 6456, "ĠAutodialDLL": 6457, "Ġ3390": 6458, "ĠQuicktime": 6459, "Ġplatforms": 6460, "ĠSimultaneous": 6461, "Ġimmediately": 6462, "ToHistoryHandler": 6463, "ĠAllTheThings": 6464, "AppvPublishingServer": 6465, "Ġ4769": 6466, "ĠImageMagick": 6467, "CURRENT": 6468, "ĠPsSendKeys": 6469, "OpenWithProgIds": 6470, "55505821": 6471, "ĠGPORemoteAccessPolicy": 6472, "ALNUM": 6473, "Ġtermsrv": 6474, "Ġspoolvulnscan": 6475, "16384": 6476, "ĠDllUnregisterServer": 6477, "ĠWerFaultSvc": 6478, "EXTENSION": 6479, "Ġbenefiting": 6480, "Ġbadpwdcount": 6481, "ĠSilentlyContinue": 6482, "Ġpossibilities": 6483, "SUCCESS": 6484, "DLPAgentService": 6485, "ĠMcAfeeDLPAgentService": 6486, "PnPEntity": 6487, "SeDebugPrivilege": 6488, "errorreportingfaults": 6489, "\"\"": 6490, "\"(": 6491, "#).": 6492, "$\"": 6493, "$..": 6494, "%,": 6495, "'d": 6496, "()": 6497, "().": 6498, "(),": 6499, ")\"": 6500, ")'": 6501, ")/": 6502, ")`.": 6503, ")):": 6504, "*'": 6505, ",\"": 6506, ".)": 6507, ".*": 6508, ".-": 6509, ".[": 6510, ".).": 6511, ".].": 6512, ".*.": 6513, ".**": 6514, ".\\`": 6515, "/\"": 6516, "04": 6517, "06": 6518, "07": 6519, "040": 6520, "012": 6521, "180": 6522, "1003": 6523, "26": 6524, "316": 6525, "635": 6526, "65535": 6527, "75": 6528, "776": 6529, "81": 6530, "82": 6531, "83": 6532, "88": 6533, "822": 6534, "876": 6535, "986": 6536, ":-": 6537, ":~": 6538, "::$": 6539, "=<": 6540, "=*'": 6541, ">\"": 6542, ">*": 6543, ">\\": 6544, ">/.": 6545, ">)'": 6546, "?\\\"": 6547, "@{": 6548, "Ab": 6549, "Action": 6550, "After": 6551, "Ali": 6552, "AUT": 6553, "Ammyy": 6554, "BE": 6555, "BR": 6556, "Bin": 6557, "Bash": 6558, "BLI": 6559, "Blast": 6560, "CL": 6561, "Cer": 6562, "Cry": 6563, "Coll": 6564, "CAR": 6565, "CSync": 6566, "DB": 6567, "Dll": 6568, "Det": 6569, "Dir": 6570, "Directory": 6571, "DIN": 6572, "Desktop": 6573, "Daemon": 6574, "Driver": 6575, "Description": 6576, "Dylib": 6577, "DCShadow": 6578, "Diamorphine": 6579, "DCSync": 6580, "Em": 6581, "Ey": 6582, "End": 6583, "Eth": 6584, "EAD": 6585, "Email": 6586, "Error": 6587, "EDR": 6588, "Elevated": 6589, "Fire": 6590, "Full": 6591, "Flag": 6592, "Func": 6593, "Flags": 6594, "Fax": 6595, "GS": 6596, "Gr": 6597, "Gu": 6598, "GET": 6599, "GIT": 6600, "GCP": 6601, "Ghost": 6602, "Gsecdump": 6603, "Golang": 6604, "Griffon": 6605, "Ho": 6606, "Hex": 6607, "Hat": 6608, "Hub": 6609, "Hide": 6610, "Hive": 6611, "HOR": 6612, "Hypervisor": 6613, "HUH": 6614, "IE": 6615, "IP": 6616, "IR": 6617, "Is": 6618, "Int": 6619, "IEM": 6620, "Image": 6621, "INS": 6622, "ION": 6623, "IIO": 6624, "Identity": 6625, "IcedID": 6626, "ICAR": 6627, "Javascript": 6628, "Juicy": 6629, "KS": 6630, "Ks": 6631, "Kit": 6632, "KST": 6633, "Kext": 6634, "Kerb": 6635, "LBA": 6636, "LIN": 6637, "Light": 6638, "LSA": 6639, "LSASS": 6640, "Liv": 6641, "Lsa": 6642, "Launches": 6643, "LUA": 6644, "Lib": 6645, "LinEnum": 6646, "MA": 6647, "MN": 6648, "MP": 6649, "Mb": 6650, "Mo": 6651, "Man": 6652, "Memory": 6653, "Maf": 6654, "Masquer": 6655, "Makes": 6656, "Message": 6657, "MSTP": 6658, "Mirror": 6659, "Non": 6660, "Netc": 6661, "Need": 6662, "Names": 6663, "Night": 6664, "Nix": 6665, "Normal": 6666, "Nimgrab": 6667, "NDIN": 6668, "OP": 6669, "OW": 6670, "Odb": 6671, "Octopus": 6672, "OBE": 6673, "OIIO": 6674, "OKit": 6675, "PA": 6676, "Ps": 6677, "Pow": 6678, "Pat": 6679, "Pers": 6680, "Pod": 6681, "Ptr": 6682, "Payload": 6683, "PSR": 6684, "Portable": 6685, "PDQ": 6686, "Potentially": 6687, "PetitPotam": 6688, "PubPrn": 6689, "QLI": 6690, "Qakbot": 6691, "RT": 6692, "Rec": 6693, "Ren": 6694, "Radmin": 6695, "Rubeus": 6696, "RustDesk": 6697, "RPR": 6698, "SP": 6699, "So": 6700, "Sp": 6701, "Ser": 6702, "Sen": 6703, "Str": 6704, "Schedule": 6705, "Sets": 6706, "SET": 6707, "Source": 6708, "SUID": 6709, "Secrets": 6710, "Silent": 6711, "Sph": 6712, "See": 6713, "Scheduler": 6714, "Store": 6715, "SACL": 6716, "Safe": 6717, "TH": 6718, "TL": 6719, "Ter": 6720, "Tri": 6721, "Tem": 6722, "Tech": 6723, "Tree": 6724, "Tail": 6725, "Take": 6726, "Ticket": 6727, "Turn": 6728, "Terminal": 6729, "Tshark": 6730, "Tries": 6731, "Type": 6732, "Telnet": 6733, "Token": 6734, "TinyTurla": 6735, "TGS": 6736, "TMP": 6737, "TOP": 6738, "TTL": 6739, "UN": 6740, "VB": 6741, "VE": 6742, "VM": 6743, "VBS": 6744, "Virtual": 6745, "VSS": 6746, "VIB": 6747, "Visual": 6748, "Valid": 6749, "WARE": 6750, "WER": 6751, "Writes": 6752, "Wmi": 6753, "Wmic": 6754, "Wevtutil": 6755, "WOW": 6756, "XIn": 6757, "XLM": 6758, "XOR": 6759, "Yes": 6760, "YLD": 6761, "\\`,": 6762, "\\*.": 6763, "\\#{": 6764, "`)": 6765, "`/": 6766, "ae": 6767, "au": 6768, "aw": 6769, "ama": 6770, "apt": 6771, "aid": 6772, "aure": 6773, "application": 6774, "aLo": 6775, "amar": 6776, "aCry": 6777, "bro": 6778, "bar": 6779, "bout": 6780, "bust": 6781, "btmp": 6782, "cr": 6783, "cum": 6784, "ccount": 6785, "ctable": 6786, "come": 6787, "cab": 6788, "curl": 6789, "cused": 6790, "casing": 6791, "cacls": 6792, "cape": 6793, "craft": 6794, "dam": 6795, "dated": 6796, "directory": 6797, "dps": 6798, "daemon": 6799, "dynamic": 6800, "dfd": 6801, "daily": 6802, "ea": 6803, "ek": 6804, "eas": 6805, "eal": 6806, "ely": 6807, "eue": 6808, "eged": 6809, "elevated": 6810, "fing": 6811, "fic": 6812, "fal": 6813, "firewall": 6814, "fron": 6815, "folders": 6816, "fven": 6817, "ga": 6818, "gw": 6819, "gre": 6820, "gor": 6821, "git": 6822, "gate": 6823, "gst": 6824, "gated": 6825, "gment": 6826, "geth": 6827, "google": 6828, "gci": 6829, "gpg": 6830, "hr": 6831, "hat": 6832, "hash": 6833, "hour": 6834, "hich": 6835, "hind": 6836, "here": 6837, "hand": 6838, "hound": 6839, "hant": 6840, "hashes": 6841, "hooks": 6842, "iy": 6843, "iest": 6844, "ibl": 6845, "iks": 6846, "iented": 6847, "items": 6848, "jf": 6849, "js": 6850, "jor": 6851, "journal": 6852, "jpg": 6853, "json": 6854, "ko": 6855, "kr": 6856, "ked": 6857, "ktemp": 6858, "known": 6859, "ling": 6860, "lCreate": 6861, "language": 6862, "lush": 6863, "lista": 6864, "me": 6865, "mn": 6866, "mu": 6867, "mw": 6868, "my": 6869, "ming": 6870, "mip": 6871, "mlog": 6872, "method": 6873, "memory": 6874, "mService": 6875, "mits": 6876, "menta": 6877, "mugg": 6878, "messages": 6879, "nl": 6880, "non": 6881, "nec": 6882, "nif": 6883, "nop": 6884, "nig": 6885, "oin": 6886, "ois": 6887, "oCon": 6888, "ojack": 6889, "oIt": 6890, "oving": 6891, "oleObject": 6892, "oHo": 6893, "ocum": 6894, "pi": 6895, "phis": 6896, "pri": 6897, "pem": 6898, "pare": 6899, "psh": 6900, "pection": 6901, "pected": 6902, "parent": 6903, "png": 6904, "pee": 6905, "pRo": 6906, "pua": 6907, "pperation": 6908, "pcalua": 6909, "qjf": 6910, "ra": 6911, "rt": 6912, "rus": 6913, "rup": 6914, "rag": 6915, "raries": 6916, "rans": 6917, "rays": 6918, "she": 6919, "sit": 6920, "sur": 6921, "sim": 6922, "sage": 6923, "seth": 6924, "sru": 6925, "security": 6926, "session": 6927, "saf": 6928, "ssive": 6929, "silent": 6930, "sues": 6931, "services": 6932, "sdb": 6933, "sPython": 6934, "sSection": 6935, "stex": 6936, "tn": 6937, "tp": 6938, "tom": 6939, "tar": 6940, "ters": 6941, "tWin": 6942, "tch": 6943, "try": 6944, "tree": 6945, "turn": 6946, "tarball": 6947, "tlCreate": 6948, "upt": 6949, "uation": 6950, "uable": 6951, "uence": 6952, "uching": 6953, "urop": 6954, "uhl": 6955, "uement": 6956, "vb": 6957, "ved": 6958, "vil": 6959, "via": 6960, "vok": 6961, "vcs": 6962, "vtutil": 6963, "value": 6964, "vmm": 6965, "vailable": 6966, "vmw": 6967, "wo": 6968, "wz": 6969, "was": 6970, "wers": 6971, "wtmp": 6972, "wmi": 6973, "wise": 6974, "which": 6975, "xies": 6976, "xordump": 6977, "you": 6978, "ypp": 6979, "yQu": 6980, "zi": 6981, "}\"": 6982, "}.": 6983, "}`": 6984, "~/": 6985, "«R": 6986, "ëR": 6987, "Ġ#": 6988, "Ġ)": 6989, "Ġ+": 6990, "Ġ\\": 6991, "Ġ_": 6992, "Ġic": 6993, "Ġess": 6994, "Ġill": 6995, "Ġir": 6996, "Ġ00": 6997, "Ġurl": 6998, "ĠZip": 6999, "Ġ99": 7000, "Ġhello": 7001, "Ġ:~": 7002, "Ġ@{": 7003, "ĠYes": 7004, "Ġ}`": 7005, "ĠëR": 7006, "Ġtes": 7007, "Ġtac": 7008, "Ġtmp": 7009, "Ġtak": 7010, "Ġtested": 7011, "Ġtemplate": 7012, "Ġtweak": 7013, "ins": 7014, "inted": 7015, "inten": 7016, "inated": 7017, "inally": 7018, "inning": 7019, "injection": 7020, "including": 7021, "inoki": 7022, "include": 7023, "Ġaware": 7024, "Ġaud": 7025, "Ġatack": 7026, "Ġappl": 7027, "Ġabo": 7028, "Ġamon": 7029, "Ġagr": 7030, "Ġapi": 7031, "erce": 7032, "erting": 7033, "onf": 7034, "ones": 7035, "oned": 7036, "hem": 7037, "eset": 7038, "esta": 7039, "esia": 7040, "escript": 7041, "esented": 7042, "esentation": 7043, "Ġsec": 7044, "Ġsom": 7045, "Ġsit": 7046, "Ġsed": 7047, "Ġsol": 7048, "Ġspl": 7049, "Ġsect": 7050, "Ġside": 7051, "Ġsound": 7052, "Ġsync": 7053, "Ġsusp": 7054, "Ġsays": 7055, "Ġshed": 7056, "Ġscheduler": 7057, "Ġsolution": 7058, "Ġscope": 7059, "Ġsince": 7060, "Ġsafe": 7061, "Ġsnif": 7062, "reed": 7063, "registry": 7064, "revers": 7065, "report": 7066, "requires": 7067, "recur": 7068, "tell": 7069, "tema": 7070, "temand": 7071, "tely": 7072, "teull": 7073, "tectable": 7074, "isk": 7075, "iso": 7076, "istive": 7077, "isecond": 7078, "ishes": 7079, "Ġthelanguage": 7080, "Ġcd": 7081, "Ġcar": 7082, "Ġcare": 7083, "Ġcru": 7084, "Ġclock": 7085, "Ġclean": 7086, "Ġcrypt": 7087, "Ġccrypt": 7088, "Ġcatalog": 7089, "Ġcopied": 7090, "Ġcsru": 7091, "orate": 7092, "orites": 7093, "lend": 7094, "letion": 7095, "leop": 7096, "letes": 7097, "leared": 7098, "legit": 7099, "Ġfas": 7100, "Ġfour": 7101, "Ġfully": 7102, "Ġfact": 7103, "Ġfake": 7104, "Ġfeed": 7105, "Ġfault": 7106, "Ġfix": 7107, "Ġfalcon": 7108, "Ġflush": 7109, "Ġfrus": 7110, "Ġftp": 7111, "Ġfreed": 7112, "Ġwget": 7113, "Ġwild": 7114, "Ġwallpaper": 7115, "Ġwmip": 7116, "ecraft": 7117, "ecko": 7118, "ndpoint": 7119, "omatic": 7120, "ominated": 7121, "Ġtocorre": 7122, "Ġtogeth": 7123, "Ġtouching": 7124, "execu": 7125, "example": 7126, "explicit": 7127, "Ġpw": 7128, "Ġpan": 7129, "Ġpof": 7130, "Ġpure": 7131, "Ġpher": 7132, "Ġpaging": 7133, "Ġpix": 7134, "Ġplease": 7135, "Ġpnp": 7136, "Ġpati": 7137, "Ġpair": 7138, "Ġpgrep": 7139, "Ġphishing": 7140, "Ġpcalua": 7141, "Ġphr": 7142, "itself": 7143, "itgroup": 7144, "itHub": 7145, "itImage": 7146, "tional": 7147, "tionary": 7148, "ustro": 7149, "uspen": 7150, "Ġdb": 7151, "Ġdic": 7152, "Ġdat": 7153, "Ġdate": 7154, "Ġdum": 7155, "Ġdire": 7156, "Ġdid": 7157, "Ġdays": 7158, "Ġdns": 7159, "Ġdynam": 7160, "Ġdynamic": 7161, "Ġdsed": 7162, "Ġdylib": 7163, "Ġdaily": 7164, "enes": 7165, "enables": 7166, "encode": 7167, "enabl": 7168, "ential": 7169, "owRun": 7170, "Ġbro": 7171, "Ġbas": 7172, "Ġbri": 7173, "Ġblog": 7174, "Ġbrit": 7175, "Ġbund": 7176, "Ġbasic": 7177, "Ġblend": 7178, "mare": 7179, "mach": 7180, "mary": 7181, "mask": 7182, "mavinject": 7183, "maccount": 7184, "icing": 7185, "icit": 7186, "icmp": 7187, "icbot": 7188, "icacls": 7189, "edia": 7190, "atch": 7191, "atched": 7192, "atching": 7193, "atthe": 7194, "atra": 7195, "Ġusnig": 7196, "roth": 7197, "Ġintro": 7198, "Ġinject": 7199, "Ġinline": 7200, "Ġinher": 7201, "Ġinthe": 7202, "Ġinstrumentation": 7203, "Ġintial": 7204, "Ġinjecting": 7205, "Ġinbuilt": 7206, "Ġintell": 7207, "ecuted": 7208, "Ġexil": 7209, "Ġexpl": 7210, "Ġextr": 7211, "Ġexporting": 7212, "Ġexported": 7213, "Ġexperience": 7214, "Ġexplicit": 7215, "artion": 7216, "arget": 7217, "arigate": 7218, "artely": 7219, "Ġok": 7220, "Ġopt": 7221, "Ġoup": 7222, "Ġopp": 7223, "Ġoption": 7224, "ĠoleObject": 7225, "Ġopperation": 7226, "asc": 7227, "asm": 7228, "asar": 7229, "asures": 7230, "asploit": 7231, "asive": 7232, "astore": 7233, "loot": 7234, "location": 7235, "losed": 7236, "lotch": 7237, "ĠAT": 7238, "ĠAsta": 7239, "ĠAppl": 7240, "ĠALL": 7241, "ĠAss": 7242, "ĠAli": 7243, "ĠAUT": 7244, "ĠAgent": 7245, "ĠACL": 7246, "ĠART": 7247, "ĠAbout": 7248, "ĠAmn": 7249, "ĠAvailable": 7250, "etl": 7251, "ety": 7252, "etasploit": 7253, "uninstall": 7254, "ĠSR": 7255, "ĠSod": 7256, "ĠSol": 7257, "ĠSay": 7258, "ĠSche": 7259, "ĠSoft": 7260, "ĠSize": 7261, "ĠSome": 7262, "ĠSource": 7263, "ĠSOM": 7264, "ĠSync": 7265, "ĠSuspicious": 7266, "ĠSym": 7267, "ĠSuccessful": 7268, "ĠSecret": 7269, "ĠSNK": 7270, "ĠSmall": 7271, "ĠSymbolic": 7272, "ĠSince": 7273, "ĠSACL": 7274, "ĠSIEM": 7275, "ĠSQLI": 7276, "ĠSSP": 7277, "ĠSTOP": 7278, "ĠSaid": 7279, "ĠSmugg": 7280, "ĠSuspen": 7281, "aler": 7282, "alys": 7283, "along": 7284, "ĠCI": 7285, "ĠCook": 7286, "ĠCLS": 7287, "ĠCookies": 7288, "ĠClient": 7289, "ĠCopied": 7290, "ĠCMSTP": 7291, "ĠCVE": 7292, "ĠCleared": 7293, "ĠTA": 7294, "ĠTech": 7295, "ĠTyp": 7296, "ĠTamper": 7297, "ĠTurn": 7298, "ĠTickets": 7299, "ĠTCC": 7300, "ĠTakes": 7301, "ĠTemplate": 7302, "ĠTinyTurla": 7303, "ĠTwo": 7304, "ĠTarget": 7305, "ĠPost": 7306, "ĠPlease": 7307, "ĠPUA": 7308, "ĠPhishing": 7309, "ĠPetitPotam": 7310, "ĠPubPrn": 7311, "ĠPPA": 7312, "ĠPTH": 7313, "ĠPhant": 7314, "ĠPois": 7315, "ĠPatching": 7316, "illeged": 7317, "illisecond": 7318, "ĠDC": 7319, "ĠDate": 7320, "ĠDot": 7321, "ĠDown": 7322, "ĠDOS": 7323, "ĠDue": 7324, "ĠDynamic": 7325, "ĠDoki": 7326, "ĠDCShadow": 7327, "ĠDiamorphine": 7328, "ĠDYLD": 7329, "tand": 7330, "tached": 7331, "tally": 7332, "erstand": 7333, "Ġvmd": 7334, "Ġvolum": 7335, "ĠvSph": 7336, "ulting": 7337, "Ġwillbe": 7338, "Ġofsoft": 7339, "Ġofsub": 7340, "ithms": 7341, "ank": 7342, "anity": 7343, "ateProcess": 7344, "Ġnear": 7345, "Ġnav": 7346, "Ġnets": 7347, "Ġnested": 7348, "Ġnmap": 7349, "Ġnaming": 7350, "Ġnimgrab": 7351, "Ġnominated": 7352, "Ġrever": 7353, "Ġrely": 7354, "Ġrevers": 7355, "Ġrecover": 7356, "Ġretain": 7357, "Ġrebo": 7358, "Ġrelev": 7359, "Ġrepr": 7360, "Ġreporting": 7361, "Ġrepair": 7362, "Ġrelocation": 7363, "ĠUpen": 7364, "Ġbegr": 7365, "Ġbelow": 7366, "Ġbeused": 7367, "Ġbehind": 7368, "Ġwiththe": 7369, "ests": 7370, "estine": 7371, "riare": 7372, "Window": 7373, "WinSxS": 7374, "Ġcomponent": 7375, "Ġcombos": 7376, "Ġcomsvcs": 7377, "Ġfilename": 7378, "ĠfileSetting": 7379, "ĠfileTries": 7380, "tement": 7381, "Ġmade": 7382, "Ġmask": 7383, "Ġmajor": 7384, "Ġmassive": 7385, "ĠEB": 7386, "ĠEch": 7387, "ĠEsta": 7388, "ĠEnt": 7389, "ĠEmp": 7390, "ĠEach": 7391, "ĠEmail": 7392, "ĠEICAR": 7393, "ĠEurop": 7394, "Ġisn": 7395, "Ġisalso": 7396, "Ġissues": 7397, "pthem": 7398, "iling": 7399, "ilie": 7400, "Ġmet": 7401, "Ġminu": 7402, "Ġmous": 7403, "Ġmicrosoft": 7404, "Ġmsi": 7405, "Ġmonit": 7406, "Ġmimic": 7407, "Ġmktemp": 7408, "Ġmillisecond": 7409, "ists": 7410, "Ġloose": 7411, "cking": 7412, "ckbit": 7413, "Ġ(\"": 7414, "Ġ(@": 7415, "Ġ(~": 7416, "Ġ(\\\"": 7417, "Ġ(*.": 7418, "Ġ()):": 7419, "Ġradmin": 7420, "Ġrisk": 7421, "Ġexecutiona": 7422, "Ġexecutions": 7423, "Ġexecutionth": 7424, "exeNote": 7425, "exeYou": 7426, "exeAdapted": 7427, "ĠRar": 7428, "ĠRule": 7429, "ĠRAM": 7430, "ĠRadmin": 7431, "ĠRansom": 7432, "ĠRDS": 7433, "ĠRight": 7434, "ĠREAD": 7435, "ĠRUN": 7436, "ĠRtlCreate": 7437, "iable": 7438, "Ġform": 7439, "Ġforge": 7440, "Ġforward": 7441, "Ġforked": 7442, "assum": 7443, "Ġthree": 7444, "Ġthread": 7445, "urse": 7446, "urrup": 7447, "umes": 7448, "umber": 7449, "entries": 7450, "ampl": 7451, "ĠWinDe": 7452, "ĠWinWord": 7453, "ĠWinSxS": 7454, "ĠtestA": 7455, "covers": 7456, "cotry": 7457, "course": 7458, "plished": 7459, "plaintext": 7460, "ĠMain": 7461, "ĠMig": 7462, "ĠMap": 7463, "ĠMshta": 7464, "ĠMessages": 7465, "ĠMimic": 7466, "ĠMirror": 7467, "ĠMeas": 7468, "ĠMedia": 7469, "ĠMatthe": 7470, "ĠMetasploit": 7471, "ĠThisis": 7472, "ĠThistest": 7473, "Ġsure": 7474, "Ġsuit": 7475, "Ġsuper": 7476, "Ġsuppl": 7477, "Ġsugg": 7478, "Ġsuite": 7479, "Ġsuffic": 7480, "ĠIE": 7481, "ĠIV": 7482, "ĠIfy": 7483, "ĠIEX": 7484, "ĠIndirect": 7485, "ĠIcedID": 7486, "ĠIdentifies": 7487, "ĠIOKit": 7488, "ctqjf": 7489, "Ġld": 7490, "Ġless": 7491, "Ġlayer": 7492, "Ġlaz": 7493, "Ġlau": 7494, "ĠLess": 7495, "ĠLim": 7496, "ĠLower": 7497, "ĠLine": 7498, "ĠLight": 7499, "ĠLANG": 7500, "ĠLinEnum": 7501, "Ġcommandline": 7502, "Ġcommandlet": 7503, "quire": 7504, "quip": 7505, "quiring": 7506, "Ġcontinu": 7507, "Ġconven": 7508, "Ġprofil": 7509, "Ġprogr": 7510, "Ġprotect": 7511, "vey": 7512, "Ġanonymous": 7513, "Ġanalys": 7514, "importing": 7515, "ained": 7516, "chk": 7517, "child": 7518, "Ġhot": 7519, "Ġhunt": 7520, "Ġhang": 7521, "Ġhere": 7522, "Ġhard": 7523, "Ġhap": 7524, "Ġhome": 7525, "Ġhook": 7526, "Ġhos": 7527, "Ġhalt": 7528, "Ġhijack": 7529, "Ġhijacking": 7530, "Ġhanging": 7531, "Ġhardware": 7532, "Ġbyimporting": 7533, "Ġuseradd": 7534, "Ġuserdaemon": 7535, "ĠFL": 7536, "ĠFav": 7537, "ĠFIN": 7538, "ĠFetch": 7539, "ĠFeder": 7540, "ĠFrag": 7541, "ĠFinally": 7542, "ryout": 7543, "Ġadapt": 7544, "Ġthatart": 7545, "Ġthatthe": 7546, "Ġthatmemory": 7547, "emble": 7548, "empty": 7549, "emoting": 7550, "ups": 7551, "upCommand": 7552, "Ġdisks": 7553, "Ġdisabling": 7554, "Ġdiscovers": 7555, "Ġordinal": 7556, "Ġoriented": 7557, "ĠWindowsIdentity": 7558, "ĠWindowsSen": 7559, "ĠWindowsregistry": 7560, "irk": 7561, "ayed": 7562, "Ġatr": 7563, "Ġattached": 7564, "ĠExec": 7565, "ĠExfiltr": 7566, "ĠExtend": 7567, "ĠExploitation": 7568, "ĠExpected": 7569, "ĠExampl": 7570, "key": 7571, "Ġasingle": 7572, "iceGu": 7573, "Ġruntime": 7574, "Ġ\"\"": 7575, "Ġ\"(": 7576, "Ġ\"-": 7577, "Ġ\"/": 7578, "Ġ\"=": 7579, "Ġ\":$": 7580, "Ġdefaults": 7581, "Ġdebug": 7582, "Ġdeobfusc": 7583, "stream": 7584, "startup": 7585, "startion": 7586, "ĠPowercatTo": 7587, "terpr": 7588, "terfw": 7589, "Ġlogic": 7590, "Ġloghost": 7591, "Ġlogman": 7592, "ĠHere": 7593, "ĠHence": 7594, "ĠHive": 7595, "ĠHVCI": 7596, "ĠHowever": 7597, "allowRun": 7598, "open": 7599, "loads": 7600, "cribed": 7601, "ĠGive": 7602, "ĠGUID": 7603, "ĠGhost": 7604, "ĠGithub": 7605, "ĠGPP": 7606, "ĠGpg": 7607, "ĠGPG": 7608, "ĠGriffon": 7609, "ĠGamar": 7610, "ĠGitHub": 7611, "Ġgi": 7612, "Ġgpp": 7613, "Ġgap": 7614, "Ġgone": 7615, "Ġgives": 7616, "Ġgolang": 7617, "Ġgecko": 7618, "Ġsuccessfull": 7619, "Ġstru": 7620, "Ġstmx": 7621, "idmu": 7622, "Shellcode": 7623, "ShellHost": 7624, "Ġenv": 7625, "Ġenumer": 7626, "Ġenviron": 7627, "Ġenforce": 7628, "Ġenforced": 7629, "Ġenough": 7630, "minidump": 7631, "untested": 7632, "ĠUsern": 7633, "ĠUsername": 7634, "Ġmodel": 7635, "Ġmodern": 7636, "Ġsuccessfulport": 7637, "igence": 7638, "Ġthiswe": 7639, "ĠthisoleObject": 7640, "Ġeg": 7641, "Ġeffect": 7642, "Ġequip": 7643, "Ġaccom": 7644, "output": 7645, "outside": 7646, "ĠPowerShelland": 7647, "ĠPowerShellMaf": 7648, "ĠBuil": 7649, "ĠBased": 7650, "ĠBund": 7651, "ĠBotnet": 7652, "ĠBeg": 7653, "ĠBlood": 7654, "ĠBlob": 7655, "ĠBloodHound": 7656, "ĠBaz": 7657, "ĠBlast": 7658, "ĠBLIN": 7659, "ĠBatch": 7660, "ĠBlotch": 7661, "fork": 7662, "tshark": 7663, "ĠVMD": 7664, "ĠVista": 7665, "ĠVIR": 7666, "ĠVanity": 7667, "Ġdisplaying": 7668, "ĠNET": 7669, "ĠNslookup": 7670, "ĠNMap": 7671, "ĠNcatTo": 7672, "ĠNumber": 7673, "acking": 7674, "ĠAdvanced": 7675, "ĠInto": 7676, "ĠInvent": 7677, "ĠInternal": 7678, "ĠInvok": 7679, "ĠOU": 7680, "ĠOST": 7681, "ĠOther": 7682, "ĠObject": 7683, "ĠOSA": 7684, "ĠOctopus": 7685, "ĠOOBE": 7686, "Ġspeed": 7687, "Ġspread": 7688, "Ġspaces": 7689, "Ġwhile": 7690, "Ġshadowstorage": 7691, "Ġshape": 7692, "uled": 7693, "ostart": 7694, "Ġprocessed": 7695, "Ġprocesswith": 7696, "ĠWLL": 7697, "ĠWann": 7698, "ĠWOR": 7699, "ĠWrites": 7700, "ĠWSR": 7701, "ĠWho": 7702, "ĠWevtutil": 7703, "ĠWallpaper": 7704, "ĠReload": 7705, "ĠReplic": 7706, "ĠRepair": 7707, "ĠRequiring": 7708, "ĠaccountThis": 7709, "tively": 7710, "tains": 7711, "tainer": 7712, "ously": 7713, "Ġchain": 7714, "Ġchsh": 7715, "Ġchos": 7716, "Ġchrome": 7717, "ĠDeli": 7718, "ĠDefaults": 7719, "Ġnewer": 7720, "Ġnewly": 7721, "Ġadversari": 7722, "Ġadversely": 7723, "Ġdisplayedalong": 7724, "ique": 7725, "Ġ`%": 7726, "Ġ`-": 7727, "Ġ`\\\\": 7728, "Ġ`~/": 7729, "trate": 7730, "tration": 7731, "true": 7732, "truncate": 7733, "trusted": 7734, "perty": 7735, "percase": 7736, "perature": 7737, "Ġsepar": 7738, "Ġsekurlsa": 7739, "Ġsegment": 7740, "ĠscriptUpon": 7741, "ĠLocker": 7742, "ĠLocated": 7743, "ĠLocale": 7744, "ĠregistryCaution": 7745, "Ġregistryentries": 7746, "ude": 7747, "blishes": 7748, "tov": 7749, "totally": 7750, "Ġcmds": 7751, "External": 7752, "Excel": 7753, "pening": 7754, "OSConfig": 7755, "ĠKit": 7756, "ĠKext": 7757, "ĠKnown": 7758, "ĠKali": 7759, "ĠKleop": 7760, "ĠKirk": 7761, "Ġoutdated": 7762, "iousSAM": 7763, "that": 7764, "thly": 7765, "Ġallthe": 7766, "format": 7767, "formance": 7768, "Ġlocalwe": 7769, "Ġlocalized": 7770, "Ġdownloaders": 7771, "ĠSystems": 7772, "Ġnothing": 7773, "see": 7774, "sekurlsa": 7775, "ĠActivities": 7776, "ĠfolderExample": 7777, "acb": 7778, "active": 7779, "acquire": 7780, "vents": 7781, "Ġ...": 7782, "Ġkeeps": 7783, "solete": 7784, "socket": 7785, "sockets": 7786, "Ġrobust": 7787, "Ġuseful": 7788, "Ġinformations": 7789, "ĠinformationUpon": 7790, "ĠAttaches": 7791, "ĠAttachment": 7792, "ored": 7793, "oreg": 7794, "urrence": 7795, "They": 7796, "These": 7797, "Ġtimestomp": 7798, "logs": 7799, "logging": 7800, "ĠShort": 7801, "ĠProfile": 7802, "ĠProxies": 7803, "Ġwhichwill": 7804, "3283": 7805, "Ġspecfic": 7806, "ĠConstr": 7807, "ĠContent": 7808, "ĠConsequently": 7809, "ĠConnec": 7810, "els": 7811, "eliks": 7812, "Ġhosting": 7813, "Ġperipheral": 7814, "Ġpertains": 7815, "Ġperformance": 7816, "ĠEnv": 7817, "ĠEnables": 7818, "ĠEncode": 7819, "ĠEnterpr": 7820, "Injection": 7821, "Integrity": 7822, "Include": 7823, "Injecting": 7824, "aged": 7825, "Ġwevtutil": 7826, "ections": 7827, "ppk": 7828, "pps": 7829, "pping": 7830, "Proxy": 7831, "Properties": 7832, "Property": 7833, "Ġuname": 7834, "Ġunzip": 7835, "Ġunlike": 7836, "Ġunquoted": 7837, "Ġunauthorized": 7838, "Ġunique": 7839, "Ġaltit": 7840, "Ġalert": 7841, "Ġalgor": 7842, "Ġalters": 7843, "Ġalerting": 7844, "Ġarbit": 7845, "Ġarchi": 7846, "Ġartifact": 7847, "Ġarrays": 7848, "Ġaccesss": 7849, "Ġaccessibl": 7850, "Ġaccesschk": 7851, "ĠChain": 7852, "ĠChunks": 7853, "erefore": 7854, "Ġdoing": 7855, "Credential": 7856, "LLMN": 7857, "ĠutilityThis": 7858, "Ġitems": 7859, "Ġidentifies": 7860, "Ġioreg": 7861, "Ġcached": 7862, "Ġcaption": 7863, "Ġcaution": 7864, "Ġcausing": 7865, "Ġoutputs": 7866, "ression": 7867, "virt": 7868, "Ġkeyword": 7869, "Ġkeyname": 7870, "ĠkeyHKLM": 7871, "Ġkeychain": 7872, "Ġkeythat": 7873, "ĠAdministrative": 7874, "ĠAdminstartion": 7875, "CreateFile": 7876, "CreateCronj": 7877, "Ġkuhl": 7878, "Ġtricbot": 7879, "Ġprivled": 7880, "Ġprivilleged": 7881, "Ġprivilie": 7882, "ething": 7883, "query": 7884, "Env": 7885, "bose": 7886, "ructive": 7887, "ĠStores": 7888, "ĠStoring": 7889, "ĠStyle": 7890, "ĠStarting": 7891, "ĠStorage": 7892, "ĠDirectorySearch": 7893, "Ġvaluable": 7894, "even": 7895, "Disabling": 7896, "DisallowRun": 7897, "clip": 7898, "clipboard": 7899, "monthly": 7900, "ickest": 7901, "Lockbit": 7902, "filterfw": 7903, "Ġconfigures": 7904, "Ġscan": 7905, "Ġscenes": 7906, "grant": 7907, "postex": 7908, "Ġrequested": 7909, "Ġrequiring": 7910, "Advanced": 7911, "Real": 7912, "Registry": 7913, "Refle": 7914, "Regsv": 7915, "Required": 7916, "RepRo": 7917, "Ġlead": 7918, "Ġleads": 7919, "Defender": 7920, "Deploy": 7921, "Deobfusc": 7922, "Deletes": 7923, "Ġembed": 7924, "Ġclic": 7925, "Ġcland": 7926, "Ġcloned": 7927, "Ġpreference": 7928, "Ġpreca": 7929, "Ġprecur": 7930, "Ġprefix": 7931, "Ġprepar": 7932, "Ġprepare": 7933, "api": 7934, "apple": 7935, "ĠexecutableUpon": 7936, "Ġreside": 7937, "Ġresolution": 7938, "Ġresulting": 7939, "Ġresemble": 7940, "ĠFilename": 7941, "ĠFileless": 7942, "007": 7943, "Ġ120": 7944, "Ġ180": 7945, "ĠADRecon": 7946, "ĠAzureAutom": 7947, "ĠDLLS": 7948, "ĠDLLRegisterServer": 7949, "Ġcompiling": 7950, "Ġdelegated": 7951, "ĠAddToHistoryHandler": 7952, "andProperty": 7953, "does": 7954, "portproxy": 7955, "umentList": 7956, "umentlist": 7957, "ĠatomicNo": 7958, "ffee": 7959, "eroot": 7960, "Ġcheckbox": 7961, "ĠServiceDll": 7962, "Ġstdin": 7963, "DisableNo": 7964, "APFilter": 7965, "acting": 7966, "actise": 7967, "Ġ2316": 7968, "Ġtaskbar": 7969, "Ġabuses": 7970, "Ġabused": 7971, "Ġprints": 7972, "Ġprinting": 7973, "Ġpresented": 7974, "Ġpractise": 7975, "Ġoverwrite": 7976, "Ġoverride": 7977, "Ġovercome": 7978, "answers": 7979, "ĠbinaryCookies": 7980, "Ġmanner": 7981, "ĠActiveDirectory": 7982, "DomainPasswordSpray": 7983, "ĠJSE": 7984, "ĠJuicy": 7985, "Ġviewing": 7986, "Ġviewpoint": 7987, "Ġviewthe": 7988, "Ġnotic": 7989, "Ġnovel": 7990, "Ġnoise": 7991, "...\"": 7992, ".....": 7993, "tivated": 7994, "Ġverbos": 7995, "Ġverbose": 7996, "duced": 7997, "proj": 7998, "program": 7999, "Ġprompts": 8000, "Ġthroughout": 8001, "urations": 8002, "Ġspawning": 8003, ":\\`,": 8004, ":\\\\..": 8005, "Ġwhenever": 8006, "ĠwhenCMD": 8007, "Ġmesssage": 8008, "ProcessName": 8009, "ProcessRefle": 8010, "ConsentPromptBehaviorAdmin": 8011, "Shim": 8012, "Share": 8013, "Should": 8014, "Shortcut": 8015, "Shares": 8016, "Ġautostart": 8017, "ĠnetworksPython": 8018, "ĠlogsUpon": 8019, "ĠLogon": 8020, "SystemRo": 8021, "tically": 8022, "ords": 8023, "Ġrecycle": 8024, "Ġloader": 8025, "Ġliving": 8026, "ĠExecutions": 8027, "Ġlaunchctl": 8028, "LEGIT": 8029, "nameExecution": 8030, "Ġ'(": 8031, "Ġ'/": 8032, "Ġ':$": 8033, "tifesta": 8034, "Ġobjec": 8035, "Ġmodifiy": 8036, "ything": 8037, "Ġ$_.": 8038, "Ġesxcli": 8039, "Ġescape": 8040, "Ġintercept": 8041, "Ġinterupt": 8042, "Ġotherchecks": 8043, "Ġotherwise": 8044, "ĠAuth": 8045, "ĠAuthor": 8046, "ĠAuthorized": 8047, "Ġdisablewindows": 8048, "Ġjavascript": 8049, "Ġqueried": 8050, "Ġparsed": 8051, "Ġlocate": 8052, "Ġlocations": 8053, "ĠKeeps": 8054, "Ġstays": 8055, "Ġstatic": 8056, "Ġstaged": 8057, "Ġstandpoint": 8058, "Ġstatement": 8059, "ĠDownloaded": 8060, "Ġitspath": 8061, "ĠGrouper": 8062, "ĠAtomicRed": 8063, "ĠAtomicShim": 8064, "Ġperforming": 8065, "DumpWrite": 8066, "NSudo": 8067, "Ġzone": 8068, "Ġzones": 8069, "Ġsecondary": 8070, "asedups": 8071, "ĠSetFile": 8072, "ĠThread": 8073, "ĠUACDisableNo": 8074, "ĠRemoteUpon": 8075, "ĠRemoteApp": 8076, "ĠNTUSER": 8077, "ĠNTFS": 8078, "PowerDump": 8079, "Powercat": 8080, "PowerUp": 8081, "SetupCommand": 8082, "abf": 8083, "abuse": 8084, "aborate": 8085, "filename": 8086, "netsh": 8087, "netrc": 8088, "Ġ365": 8089, "ĠQbot": 8090, "Ġechos": 8091, "Ġechoes": 8092, "Ġechoing": 8093, "Ġafterwards": 8094, "erbird": 8095, "Ġserved": 8096, "ĠRunPre": 8097, "ĠRunbook": 8098, "DeleteLog": 8099, "ATION": 8100, "Package": 8101, "WMIMethod": 8102, "Ġplan": 8103, "Ġbutdoes": 8104, "Ġeventlogs": 8105, "Ġmodifications": 8106, "bedded": 8107, "Attaches": 8108, "Attachment": 8109, "Atbro": 8110, "getglobalstate": 8111, "Ġ01": 8112, "Ġ02": 8113, "Ġ03": 8114, "Ġ04": 8115, "Ġ05": 8116, "Ġ06": 8117, "Ġ07": 8118, "Ġ08": 8119, "Ġ09": 8120, "Ġtyping": 8121, "Ġundocum": 8122, "Ġunderstand": 8123, "REvil": 8124, "ScriptControl": 8125, "passwordsdb": 8126, "underbird": 8127, "Ġcertreq": 8128, "Ġcertificates": 8129, "Ġfinding": 8130, "Ġfindstr": 8131, "Ġinsall": 8132, "Ġinsight": 8133, "Ġinserts": 8134, "Ġinspection": 8135, "ĠSSHRemote": 8136, "ĠSSHLocal": 8137, "Ġoffensive": 8138, "Ġnetmask": 8139, "ĠRedLine": 8140, "ĠRedhat": 8141, "ificant": 8142, "ĠManufacturer": 8143, "Ġsudoers": 8144, "ĠHISTCONTROL": 8145, "ĠLocalUpon": 8146, "ĠLocalAdmin": 8147, "ĠChromes": 8148, "pointers": 8149, "1036": 8150, "1033": 8151, "1086": 8152, "1098": 8153, "lier": 8154, "live": 8155, "Ġowned": 8156, "ĠtextExtraction": 8157, "Ġsysmon": 8158, "Ġsysctl": 8159, "Ġsystemand": 8160, "Ġwritable": 8161, "ĠShellcode": 8162, "ĠSimple": 8163, "ĠSimulation": 8164, "ĠUntil": 8165, "ĠUnquoted": 8166, "ĠUnloads": 8167, "Ġlogins": 8168, "ĠsystemsUpon": 8169, "Executes": 8170, "Ġargs": 8171, "Ġarguement": 8172, "Stream": 8173, "Storage": 8174, "delete": 8175, "detect": 8176, "defaults": 8177, "deletion": 8178, "forens": 8179, "Ġimpa": 8180, "installed": 8181, "installtype": 8182, "Ġapps": 8183, "Ġapprop": 8184, "Ġappeal": 8185, "ĠScarab": 8186, "ĠResolution": 8187, "ĠInstalls": 8188, "ĠInstalled": 8189, "ĠInstallHelper": 8190, "Installed": 8191, "Installation": 8192, "InstallHelper": 8193, "ĠKeychain": 8194, "1115": 8195, "1133": 8196, "1127": 8197, "1140": 8198, "ListCronj": 8199, "ListSecrets": 8200, "RemotePC": 8201, "akteull": 8202, "csr": 8203, "csv": 8204, "csproj": 8205, "Ġerasedups": 8206, "Ġerlier": 8207, "Ġclearing": 8208, "Ġclearance": 8209, "ĠSyslog": 8210, "ĠSysWOW": 8211, "ĠSystema": 8212, "ĠExplorerSync": 8213, "Ġspecifically": 8214, "AddToHistoryHandler": 8215, "Ġ2016": 8216, "Ġ2019": 8217, "Ġtargeting": 8218, "Chrome": 8219, "RunDLL": 8220, "RunPE": 8221, "ĠipUpon": 8222, "Ġpoints": 8223, "Ġpointing": 8224, "Ġpointed": 8225, "Ġoperate": 8226, "ĠSpread": 8227, "ĠSpaw": 8228, "Ġrestric": 8229, "Ġrestoration": 8230, "ĠRemoting": 8231, "Ġsubdomain": 8232, "Ġsubvert": 8233, "Ġsubfolders": 8234, "Ġsubmits": 8235, "Ġsubtree": 8236, "Ġgeneration": 8237, "Ġgenerates": 8238, "ĠpasswordsDB": 8239, "Ġevil": 8240, "Ġevasive": 8241, "Ġinstallationrar": 8242, "Ġinstallationwz": 8243, "Ġscreensaver": 8244, "LIBR": 8245, "Ġauditing": 8246, "ĠComadmin": 8247, "ĠCommunication": 8248, "ĠComponent": 8249, "ĠListing": 8250, "ĠListView": 8251, "ĠFilesystem": 8252, "Ġdetections": 8253, "Ġgetting": 8254, "ĠBlackHat": 8255, "Ġworking": 8256, "Utilize": 8257, "obsolete": 8258, "ĠAltWin": 8259, "Ġthreats": 8260, "ĠIPC": 8261, "Ġdiskshadow": 8262, "AtomicUser": 8263, "AtomicRed": 8264, "AtomicAdministrator": 8265, "Copying": 8266, "NETUpon": 8267, "cconf": 8268, "comadmin": 8269, "comsvcs": 8270, "itional": 8271, "modify": 8272, "Ġ52": 8273, "Ġ53": 8274, "Ġ54": 8275, "Ġheap": 8276, "Ġsensitivefiles": 8277, "ĠexeUpon": 8278, "ĠScripts": 8279, "ĠScriptlet": 8280, "ĠScriptControl": 8281, "ĠChecks": 8282, "ĠCheckIfInstallable": 8283, "ĠCompiles": 8284, "ĠCompati": 8285, "ĠEventCode": 8286, "Ġassumes": 8287, "Logon": 8288, "Logoff": 8289, "LogMeIn": 8290, "Ġautomate": 8291, "Ġautomation": 8292, "ServiceV": 8293, "zipwas": 8294, "Ġflagged": 8295, "Ġinfections": 8296, "ĠTaskScheduler": 8297, "ĠPersistenceUpon": 8298, "Ġnonstandard": 8299, "Ġmsfven": 8300, "ĠcontrollerAn": 8301, "Ġbypassing": 8302, "Ġdiscovered": 8303, "ĠOfficeis": 8304, "ĠOfficeapplication": 8305, "Ġwhois": 8306, "Ġwhole": 8307, "Ġallowed": 8308, "ĠvariablesUpon": 8309, "ĠScanner": 8310, "ADObject": 8311, "ADRecon": 8312, "Trickbot": 8313, "printen": 8314, "ĠXLM": 8315, "ĠXOR": 8316, "ĠXLAM": 8317, "ĠXordump": 8318, "ĠXclip": 8319, "Ġbruteforce": 8320, "Ġextracting": 8321, "ĠAVs": 8322, "ĠAccessed": 8323, "Ġvulns": 8324, "ĠGlobalFlag": 8325, "office": 8326, "ĠBoot": 8327, "ĠĠĠĠĠĠĠ": 8328, "ĠAutoIt": 8329, "ĠAutoSUID": 8330, "ĠAPIs": 8331, "Ġbehaviors": 8332, "ERT": 8333, "FileProtocolHandler": 8334, "ITY": 8335, "PwdCount": 8336, "aled": 8337, "control": 8338, "cmdline": 8339, "Ġ%{": 8340, "Ġportproxy": 8341, "ĠexfiltrationExpected": 8342, "ĠAllows": 8343, "ĠDoes": 8344, "Ġbeforehand": 8345, "Ġelevate": 8346, "ĠDeleting": 8347, "ĠDelegation": 8348, "ĠDelegate": 8349, "agerLoad": 8350, "Ġleveraged": 8351, "Ġboxes": 8352, "Ġmanuallyor": 8353, "processes": 8354, "Ġappearwith": 8355, "158": 8356, "AppX": 8357, "LOLBA": 8358, "USB": 8359, "lsm": 8360, "serviceabuse": 8361, "week": 8362, "Ġ40": 8363, "Ġ4776": 8364, "ĠxCl": 8365, "Ġxlsm": 8366, "Ġtryto": 8367, "Ġcustomshellhost": 8368, "ĠEmulation": 8369, "ĠFireEy": 8370, "ĠOverride": 8371, "ĠOpened": 8372, "ExecInt": 8373, "ĠAttribute": 8374, "ĠcaptureAfter": 8375, "Ġdriverquery": 8376, "Userinit": 8377, "crond": 8378, "results": 8379, "textExtraction": 8380, "Ġportable": 8381, "ĠTeamViewer": 8382, "ĠPsr": 8383, "ĠPortal": 8384, "Ġreadable": 8385, "ĠForward": 8386, "ĠBrowserPwn": 8387, "ĠVMware": 8388, "ĠVMWARE": 8389, "Admins": 8390, "Ġescalate": 8391, "Ġupdates": 8392, "Ġzipped": 8393, "Ġdetermines": 8394, "OpenURL": 8395, "TestNames": 8396, "cial": 8397, "pyc": 8398, "Ġtakeown": 8399, "Ġcrack": 8400, "Ġcrashes": 8401, "Ġcrackmapexec": 8402, "Ġcrmlog": 8403, "Ġbinaries": 8404, "Ġbinpath": 8405, "ĠServerity": 8406, "ĠPrperties": 8407, "ĠMounted": 8408, "ĠMocking": 8409, "Ġlonger": 8410, "Ġhashing": 8411, "Ġhashdump": 8412, "Ġstreams": 8413, "Ġspecifying": 8414, "Ġjournald": 8415, "Ġjournalctl": 8416, "Ġcollector": 8417, "Ġlikelyto": 8418, "ggering": 8419, "ĠKerberosPr": 8420, "DNSAdmins": 8421, "Printer": 8422, "PromptOn": 8423, "linker": 8424, "pecific": 8425, "pectives": 8426, "Ġ*}": 8427, "Ġsshd": 8428, "Ġsamplef": 8429, "Ġfiltering": 8430, "Ġfiltered": 8431, "Ġpattern": 8432, "Ġpatching": 8433, "Ġperspectives": 8434, "mattifesta": 8435, "ĠArtifact": 8436, "ĠCracking": 8437, "ĠDumps": 8438, "Ġrelies": 8439, "Ġlooks": 8440, "ĠVirtualbox": 8441, "ĠVirtualBox": 8442, "Ġspoofing": 8443, "EnableLUA": 8444, "ĠStartupItems": 8445, "Ġprinters": 8446, "Ġlocalectl": 8447, "StartupItems": 8448, "Ġright": 8449, "ARP": 8450, "ART": 8451, "AllCheck": 8452, "AutoIt": 8453, "Assistive": 8454, "Gatekeeper": 8455, "PACE": 8456, "Unload": 8457, "Unlike": 8458, "WebBrowserPassView": 8459, "both": 8460, "nesses": 8461, "prefetch": 8462, "Ġ,,,": 8463, "Ġ60": 8464, "Ġ600": 8465, "Ġqueue": 8466, "Ġquickest": 8467, "Ġavoids": 8468, "Ġpschild": 8469, "Ġdescription": 8470, "Ġdescribed": 8471, "Ġindustro": 8472, "Ġregistered": 8473, "Ġlisteners": 8474, "ĠLaunchApplication": 8475, "ĠLaunchDaemon": 8476, "Ġconsists": 8477, "ĠHashNote": 8478, "ĠGrant": 8479, "ĠGrae": 8480, "Ġchoose": 8481, "ExpandProperty": 8482, "ĠSharpView": 8483, "ĠConfigure": 8484, "ĠLoginHook": 8485, "tificationPackage": 8486, "ĠTools": 8487, "USERNAME": 8488, "%\\...": 8489, "40444": 8490, "CimProvid": 8491, "CimSession": 8492, "Force": 8493, "Forward": 8494, "HISTSIZE": 8495, "Malware": 8496, "Maldoc": 8497, "Netsh": 8498, "NetTCP": 8499, "NetSupport": 8500, "RAID": 8501, "WithURL": 8502, "notrans": 8503, "osed": 8504, "osascript": 8505, "pgp": 8506, "interactive": 8507, "Ġswapping": 8508, "Ġcatching": 8509, "Ġtokens": 8510, "Ġdestructive": 8511, "ĠSIGMA": 8512, "ĠTrusted": 8513, "ĠTrickbot": 8514, "ĠPopular": 8515, "Ġmarker": 8516, "ĠESXI": 8517, "Ġmeant": 8518, "Ġmeasures": 8519, "Ġantiphis": 8520, "Ġdeployed": 8521, "Ġgranting": 8522, "Ġshowcase": 8523, "Ġshowcasing": 8524, "ĠContained": 8525, "Ġtransparent": 8526, "Ġrecords": 8527, "Ġnetshnetsh": 8528, "ĠPerforms": 8529, "Ġscreenshots": 8530, "ComputerName": 8531, "ĠHelpText": 8532, "Ġfamily": 8533, "192": 8534, "50822": 8535, "EXE": 8536, "EXO": 8537, "EXX": 8538, "PUBLI": 8539, "Prevent": 8540, "PortProxy": 8541, "Scanning": 8542, "Scenarios": 8543, "Scarab": 8544, "compat": 8545, "compute": 8546, "hingAttachment": 8547, "ived": 8548, "rarily": 8549, "samaccount": 8550, "esentutl": 8551, "Ġclose": 8552, "Ġcloses": 8553, "Ġpurpose": 8554, "Ġbengin": 8555, "ĠbadPwdCount": 8556, "ĠSilentProcessExit": 8557, "ĠPrefetch": 8558, "ĠPreferen": 8559, "ĠPrevents": 8560, "Ġreplace": 8561, "Ġreplaces": 8562, "aderDeletes": 8563, "Ġcombines": 8564, "Ġcombined": 8565, "ĠEsxcli": 8566, "ĠRecently": 8567, "ĠRecords": 8568, "ĠWindowStyle": 8569, "Ġhandle": 8570, "Ġadvanced": 8571, "Ġassociation": 8572, "Ġ\"$\"": 8573, "Ġ\"$\".": 8574, "Ġemails": 8575, "ĠBruteforce": 8576, "Extracting": 8577, "Ġroutine": 8578, "Ġlistings": 8579, "Provide": 8580, "Provided": 8581, "erequisite": 8582, "Ġvalidate": 8583, "Ġvalidation": 8584, "Detecting": 8585, "Ġclicking": 8586, "...`": 8587, "Ġcompletely": 8588, "ĠAutomatic": 8589, "Ġplacement": 8590, "Ġundetectable": 8591, "ĠAlternatively": 8592, "ĠClasses": 8593, "ĠpersistanceUpon": 8594, "Ġlookedup": 8595, "ĠCanaryToken": 8596, "Ġsayingit": 8597, "Ġcampaigne": 8598, "Ġcampaigns": 8599, "AnyDesk": 8600, "Applications": 8601, "Auditd": 8602, "Before": 8603, "Launchctl": 8604, "NOTE": 8605, "Peripheral": 8606, "Removing": 8607, "TaskCache": 8608, "Works": 8609, "automatic": 8610, "findstr": 8611, "msdd": 8612, "scr": 8613, "setuid": 8614, "sysmon": 8615, "sysctl": 8616, "sysinternals": 8617, "ĠâĢĵ": 8618, "ĠâĢĺ": 8619, "Ġterminated": 8620, "Ġturned": 8621, "Ġfailures": 8622, "Ġframeworks": 8623, "Ġwordlist": 8624, "Ġblind": 8625, "Ġblank": 8626, "Ġbottom": 8627, "Ġbrowse": 8628, "Ġbrowserpwn": 8629, "Ġinvalid": 8630, "ĠStaging": 8631, "ĠPathToAtomicsFolder": 8632, "ĠDetailsand": 8633, "Ġvbscript": 8634, "Ġmatch": 8635, "Ġmatches": 8636, "Ġmini": 8637, "Ġ(`...`": 8638, "ĠMachines": 8639, "Ġsupport": 8640, "Ġsuppression": 8641, "ĠImpacket": 8642, "Ġdetects": 8643, "Ġdetecting": 8644, "Ġgathering": 8645, "ĠRegEdit": 8646, "Ġunlocks": 8647, "Ġuninstaller": 8648, "Ġuninstalling": 8649, "Environments": 8650, "Ġprereqs": 8651, "Ġmanipulate": 8652, "Ġmanipulating": 8653, "Ġmanipulation": 8654, "ĠRunOnceEx": 8655, "Ġbackdoors": 8656, "libprocesshider": 8657, "Ġimpacting": 8658, "Ġappends": 8659, "ĠScreencapture": 8660, "ĠScreensaver": 8661, "ĠAPTs": 8662, "ĠSpecified": 8663, "ĠSpecific": 8664, "ĠSpecial": 8665, "Ġretrieves": 8666, "LoggingServiceV": 8667, "Ġreturns": 8668, "Ġreturned": 8669, "Ġcapabilityuses": 8670, "Ġassociatedwith": 8671, "Parameters": 8672, "Ġmechanisms": 8673, "2011": 8674, "2021": 8675, "2012": 8676, "BrowserSte": 8677, "CheckIfInstallable": 8678, "Downloaded": 8679, "GlobalFlags": 8680, "GPPPassword": 8681, "GPPPasswords": 8682, "Impacket": 8683, "Impair": 8684, "LDAPFilter": 8685, "PENDIN": 8686, "Pluggable": 8687, "Private": 8688, "SSHD": 8689, "btm": 8690, "binarycookies": 8691, "certreq": 8692, "credential": 8693, "credentials": 8694, "discovery": 8695, "disabling": 8696, "decode": 8697, "decrypt": 8698, "polit": 8699, "secedit": 8700, "taskmanage": 8701, "vbsIn": 8702, "whois": 8703, "Ġedge": 8704, "Ġignoring": 8705, "Ġsignature": 8706, "Ġsignificant": 8707, "Ġsecurely": 8708, "Ġdsenabl": 8709, "Ġbitsdam": 8710, "Ġbreaking": 8711, "Ġoccurrence": 8712, "ĠSupply": 8713, "ĠCalled": 8714, "ĠCurrentTem": 8715, "ĠTimer": 8716, "Ġrealm": 8717, "Ġcontrolled": 8718, "Ġconducts": 8719, "Ġcontacting": 8720, "Ġproceeds": 8721, "ĠVisualBasic": 8722, "ĠIntergre": 8723, "ĠInfoTech": 8724, "ĠWorming": 8725, "ĠDeployment": 8726, "Ġopensource": 8727, "Ġaltered": 8728, "Ġkills": 8729, "Ġkilling": 8730, "Ġkillng": 8731, "Ġnotifications": 8732, "Ġinteresting": 8733, "ĠAtomicTestHar": 8734, "Ġimplementation": 8735, "ĠĠĠĠĠĠĠĠĠĠ": 8736, "ĠĠĠĠĠĠĠĠĠĠĠĠĠĠĠĠ": 8737, "Ġvulnerabilityknown": 8738, "Ġstealer": 8739, "Ġstealing": 8740, "HISTFILESIZE": 8741, "Ġtransferand": 8742, "Ġtransferring": 8743, "Ġremoving": 8744, "Ġremovable": 8745, "Ġimpersonate": 8746, "Ġdialogs": 8747, "Ġdialogue": 8748, "283283": 8749, "563": 8750, "ASRepRo": 8751, "CodeIntegrity": 8752, "DynamicCompile": 8753, "GoToAssist": 8754, "Goga": 8755, "Harcoded": 8756, "Harvest": 8757, "IFM": 8758, "MSP": 8759, "Miner": 8760, "PhishingAttachment": 8761, "Simulate": 8762, "SyncAppvPublishingServer": 8763, "Thread": 8764, "Therefore": 8765, "Thunderbird": 8766, "Where": 8767, "WriteVirtual": 8768, "WORKS": 8769, "bility": 8770, "efly": 8771, "mstsc": 8772, "rvse": 8773, "xlsm": 8774, "xlsx": 8775, "ĠZIP": 8776, "Ġtitles": 8777, "Ġactually": 8778, "Ġactual": 8779, "istant": 8780, "Ġcoerce": 8781, "Ġfocused": 8782, "Ġfruits": 8783, "Ġpublicly": 8784, "Ġdaemons": 8785, "Ġduplication": 8786, "Ġbucket": 8787, "Ġinturrup": 8788, "Ġinactivated": 8789, "Ġexploits": 8790, "Ġexploiting": 8791, "argumentlist": 8792, "ĠSensitiveFiles": 8793, "ĠCertificates": 8794, "ĠCustomShellHost": 8795, "ĠCloudTrail": 8796, "ĠPluggable": 8797, "ĠPowerspolit": 8798, "ĠDecode": 8799, "ĠDriverQuery": 8800, "Ġntdsutil": 8801, "Ġreceive": 8802, "Ġreceives": 8803, "Ġreceived": 8804, "Ġreviewthe": 8805, "ĠUltraViewer": 8806, "Ġmount": 8807, "Ġmisconfig": 8808, "Ġforests": 8809, "ĠWinRMUpon": 8810, "ĠMcAffee": 8811, "Ġsuccessul": 8812, "ĠExitProcess": 8813, "Ġdepending": 8814, "Ġdependenc": 8815, "Ġdevelop": 8816, "Ġdeveloper": 8817, "Ġdeveloped": 8818, "ĠGozi": 8819, "Ġenclosed": 8820, "Ġeverything": 8821, "ĠBefore": 8822, "ĠNetSupport": 8823, "ĠOrdinal": 8824, "ĠReportingMode": 8825, "Ġselect": 8826, "Ġselected": 8827, "Ġselectively": 8828, "ĠLockbit": 8829, "blueblue": 8830, "ExclusionProcess": 8831, "ExclusionPath": 8832, "ExclusionExtension": 8833, "OSTap": 8834, "Ġwebserverand": 8835, "Ġunattended": 8836, "EnforcedCodeIntegrity": 8837, "Regasm": 8838, "00000000": 8839, "Ġauthenticated": 8840, "Ġuploaded": 8841, "Ġdecrease": 8842, "Ġdecreases": 8843, "Ġdecreasing": 8844, "Ġevening": 8845, "ĠkeystrokesProvided": 8846, "ĠNotifications": 8847, "ARIES": 8848, "ĠCollector": 8849, "ĠOperational": 8850, "nnnnnnnn": 8851, "ScreenConnect": 8852, "Privileges": 8853, "Ġignoreboth": 8854, "Ġoccurs": 8855, "Keystrokes": 8856, "nologies": 8857, "Ġeffectively": 8858, "/*/": 8859, "651033": 8860, "Account": 8861, "Activate": 8862, "Blackbit": 8863, "BlackCat": 8864, "DeviceGu": 8865, "HTA": 8866, "HTML": 8867, "Hey": 8868, "Headless": 8869, "HuHu": 8870, "LegalNoticeText": 8871, "LegalNoticeCaption": 8872, "Model": 8873, "Quartely": 8874, "Staging": 8875, "Standard": 8876, "SAMR": 8877, "SecureDesktop": 8878, "TeamViewer": 8879, "UltraViewer": 8880, "UltraVNC": 8881, "\\..\\": 8882, "customshellhost": 8883, "fdg": 8884, "hlk": 8885, "htaTrickbot": 8886, "ibly": 8887, "ieMiner": 8888, "jscriptExecution": 8889, "subfolder": 8890, "vesting": 8891, "Ġteamer": 8892, "Ġteamviewer": 8893, "texecuted": 8894, "usersdps": 8895, "Ġdrops": 8896, "Ġdropping": 8897, "Ġourselves": 8898, "Ġoldchecks": 8899, "localectl": 8900, "ĠAppleScript": 8901, "ĠSwap": 8902, "ĠSwitch": 8903, "ĠServers": 8904, "ĠServicing": 8905, "ĠSubnet": 8906, "ĠSubsequently": 8907, "ĠStealer": 8908, "ĠStealth": 8909, "alias": 8910, "ĠTerminates": 8911, "ĠTerminateProcess": 8912, "ĠPanel": 8913, "ĠPanther": 8914, "ĠDirectories": 8915, "Ġviruses": 8916, "Ġreposit": 8917, "ĠUpload": 8918, "ĠUppercase": 8919, "address": 8920, "Ġthings": 8921, "ĠMiniDumpWrite": 8922, "Ġlimit": 8923, "Ġlimiting": 8924, "ĠLegalNoticeText": 8925, "ĠLegalNoticeCaption": 8926, "Ġconceal": 8927, "Ġconcealed": 8928, "Ġprofilesand": 8929, "Ġharness": 8930, "Ġharvesting": 8931, "Ġhides": 8932, "Ġhiding": 8933, "ĠPowerUpSQL": 8934, "ĠHeadless": 8935, "ĠHeaderDeletes": 8936, "Ġelse": 8937, "Ġelaborate": 8938, "Ġeasier": 8939, "Ġeasiest": 8940, "Ġcancels": 8941, "ĠVBscript": 8942, "ĠVars": 8943, "ĠVariable": 8944, "ĠNtCreateFile": 8945, "ĠNtWriteVirtual": 8946, "Ġutilises": 8947, "Ġutilised": 8948, "ĠWeakness": 8949, "ĠRegistering": 8950, "ĠRequesting": 8951, "ĠDevice": 8952, "ĠDetects": 8953, "Ġ`../": 8954, "Ġ`..`)": 8955, "Ġfunctionalities": 8956, "InputArg": 8957, "InboxRule": 8958, "Ġweaknesses": 8959, "Ġunpack": 8960, "Ġunpatched": 8961, "Ġalternatively": 8962, "Ġtradecraft": 8963, "Ġtraditional": 8964, "Ġpreferred": 8965, "Ġresearcher": 8966, "Ġ2008": 8967, "Configure": 8968, "Ġrecommended": 8969, "Ġlibprocesshider": 8970, "Ġlibcurl": 8971, "Ġparseable": 8972, "Ġtriggerspecific": 8973, "Ġinflight": 8974, "Ġinfluence": 8975, "Ġ4698": 8976, "Ġguidance": 8977, "Ġcrashing": 8978, "ĠCradlecraft": 8979, "Ġquietly": 8980, "Ġindicatethe": 8981, "Ġconnects": 8982, "Ġconnectivity": 8983, "Ġcorrectly": 8984, "Ġmarkdown": 8985, "Ġ8081": 8986, "auths": 8987, "Ġterminatesitself": 8988, "ĠDDEAUT": 8989, "backgrounditems": 8990, "backgroundtaskmanage": 8991, "Ġcovertly": 8992, "Ġencodes": 8993, "Ġencoding": 8994, "ĠNetshHelper": 8995, "ArgumentList": 8996, "Ġtunneling": 8997, "Ġcorresponding": 8998, "Ġfacilitate": 8999, "Ġfacilitating": 9000, "Ġdedicatedservice": 9001, "ĠUniqueID": 9002, "Ġ\"*\"},": 9003, "Ġaccordingly": 9004, "ĠAllTheThingsx": 9005, "ĠbadpwdcountNeed": 9006, "$.......": 9007, ".].[": 9008, "0688": 9009, "1809": 9010, "986040": 9011, "?\\\"),": 9012, "Abuse": 9013, "Alias": 9014, "Binaries": 9015, "Certutil": 9016, "Collect": 9017, "Detail": 9018, "Dirty": 9019, "Embedded": 9020, "Ethernet": 9021, "ErrorAction": 9022, "Firefox": 9023, "Fullname": 9024, "FuncPtr": 9025, "Grant": 9026, "HiveNight": 9027, "HORITY": 9028, "HypervisorEnforcedCodeIntegrity": 9029, "HUHoHo": 9030, "INSERT": 9031, "KSTATION": 9032, "KextWithURL": 9033, "Kerbrute": 9034, "Living": 9035, "Libraries": 9036, "Mount": 9037, "ManagerLoad": 9038, "Masquerade": 9039, "Netcat": 9040, "Odbcconf": 9041, "PsExec": 9042, "Poweliks": 9043, "Pattern": 9044, "Persist": 9045, "Podman": 9046, "Payloads": 9047, "PSRemoting": 9048, "Recently": 9049, "Renamed": 9050, "RPRN": 9051, "Sock": 9052, "Space": 9053, "SeriousSAM": 9054, "String": 9055, "SilentProcessExit": 9056, "TermService": 9057, "Triggering": 9058, "Tsharkinstalled": 9059, "TMPFILE": 9060, "VIBs": 9061, "WmiMethod": 9062, "XInitImage": 9063, "amatically": 9064, "aureport": 9065, "aLoader": 9066, "crackmapexec": 9067, "false": 9068, "front": 9069, "gwre": 9070, "hourly": 9071, "krnl": 9072, "listapps": 9073, "mentagent": 9074, "oContainer": 9075, "ojacking": 9076, "primary": 9077, "peek": 9078, "rtf": 9079, "sheet": 9080, "survey": 9081, "simulating": 9082, "sethc": 9083, "safety": 9084, "uational": 9085, "wmiobject": 9086, "ypprop": 9087, "yQuasar": 9088, "Ġicon": 9089, "Ġessential": 9090, "Ġillicit": 9091, "Ġirrevers": 9092, "Ġ9999": 9093, "Ġ:~$": 9094, "Ġ@{\"": 9095, "Ġtestexecuted": 9096, "Ġtactic": 9097, "Ġtaken": 9098, "Ġtweaking": 9099, "inokibi": 9100, "Ġawareness": 9101, "Ġaudio": 9102, "Ġatacker": 9103, "Ġapplies": 9104, "Ġabove": 9105, "Ġamongst": 9106, "Ġagruments": 9107, "esentations": 9108, "Ġsecedit": 9109, "Ġsomething": 9110, "Ġsituational": 9111, "Ġsolutions": 9112, "Ġsplit": 9113, "Ġsector": 9114, "Ġsyncing": 9115, "Ġsuspend": 9116, "Ġsheduled": 9117, "Ġsniffing": 9118, "recurse": 9119, "Ġcarryout": 9120, "Ġcarefully": 9121, "Ġcrucial": 9122, "Ġcryptojacking": 9123, "Ġcsrutil": 9124, "Ġfaster": 9125, "Ġfeedback": 9126, "Ġfalcond": 9127, "Ġfrustrate": 9128, "Ġfreedom": 9129, "Ġwmiprvse": 9130, "Ġtocorrelate": 9131, "Ġtogether": 9132, "execute": 9133, "explicitauths": 9134, "Ġpane": 9135, "Ġpofile": 9136, "Ġpurepowershell": 9137, "Ġpheripheral": 9138, "Ġpixels": 9139, "Ġpnputil": 9140, "Ġpatient": 9141, "Ġphrase": 9142, "Ġdictionary": 9143, "Ġdatastore": 9144, "Ġdumpthem": 9145, "Ġdirecotry": 9146, "Ġdynamically": 9147, "Ġdseditgroup": 9148, "Ġbroken": 9149, "Ġbasically": 9150, "Ġbriefly": 9151, "Ġbrittle": 9152, "Ġbundled": 9153, "Ġblending": 9154, "machine": 9155, "Ġintroduced": 9156, "Ġinherits": 9157, "Ġintelligence": 9158, "Ġexiltration": 9159, "Ġexploration": 9160, "Ġextracted": 9161, "Ġexplicitly": 9162, "Ġoptoin": 9163, "Ġouput": 9164, "Ġopposed": 9165, "ĠAstaroth": 9166, "ĠApplescript": 9167, "ĠAssistant": 9168, "ĠAliases": 9169, "ĠAUTHORITY": 9170, "ĠAmnesia": 9171, "ĠSodinokibi": 9172, "ĠSolarigate": 9173, "ĠSayre": 9174, "ĠScheme": 9175, "ĠSoftRAID": 9176, "ĠSOME": 9177, "ĠSyncAppvPublishingServer": 9178, "ĠSymlink": 9179, "ĠSACLThese": 9180, "ĠSQLITE": 9181, "ĠSmuggling": 9182, "ĠSuspension": 9183, "ĠCookieMiner": 9184, "ĠCLSID": 9185, "ĠTechnologies": 9186, "ĠTypically": 9187, "ĠPostMessage": 9188, "ĠPUAs": 9189, "ĠPoisoning": 9190, "ĠDotNet": 9191, "ĠDowngrade": 9192, "Ġvmdks": 9193, "Ġvolumes": 9194, "ĠvSphere": 9195, "Ġofsoftware": 9196, "Ġofsubsequent": 9197, "Ġnavigate": 9198, "Ġnetsvcs": 9199, "Ġreverting": 9200, "Ġreverse": 9201, "Ġrecoverable": 9202, "Ġretained": 9203, "Ġrebooted": 9204, "Ġrelevant": 9205, "Ġrepresentations": 9206, "Ġbegrayed": 9207, "estinely": 9208, "WindowStyle": 9209, "ĠEcho": 9210, "ĠEstablishes": 9211, "ĠEntry": 9212, "ĠEmpire": 9213, "ĠEurope": 9214, "Ġminute": 9215, "Ġmouse": 9216, "Ġmonitored": 9217, "Ġmilliseconds": 9218, "Ġ()):```": 9219, "Ġexecutionthere": 9220, "ĠRansomEXX": 9221, "ĠREADME": 9222, "ĠRtlCreateProcessRefle": 9223, "assume": 9224, "ĠWinDefend": 9225, "ĠMigration": 9226, "ĠMirrorBlast": 9227, "ĠMeasure": 9228, "ĠMatthew": 9229, "Ġsuperuser": 9230, "Ġsupply": 9231, "Ġsuggests": 9232, "Ġsufficient": 9233, "ĠIfyou": 9234, "Ġlazagne": 9235, "Ġlauch": 9236, "ĠLimits": 9237, "ĠLowercase": 9238, "Ġcontinuously": 9239, "Ġconventional": 9240, "Ġprofiler": 9241, "Ġprogramatically": 9242, "Ġanalysis": 9243, "Ġhotfix": 9244, "Ġhunting": 9245, "Ġhardcoded": 9246, "Ġhappening": 9247, "Ġhosted": 9248, "ĠFavorites": 9249, "ĠFederation": 9250, "ĠFragment": 9251, "Ġadaptor": 9252, "ĠWindowsSensor": 9253, "ĠExfiltrates": 9254, "ĠExamples": 9255, "Ġdebugging": 9256, "Ġdeobfuscates": 9257, "ĠGhostTask": 9258, "ĠGamarue": 9259, "Ġgaps": 9260, "Ġstructure": 9261, "Ġstmxcsr": 9262, "Ġenumerated": 9263, "Ġenvironement": 9264, "Ġenforcement": 9265, "ĠUsernames": 9266, "Ġequipment": 9267, "Ġaccomplished": 9268, "ĠPowerShellMafia": 9269, "ĠBuilder": 9270, "ĠBundles": 9271, "ĠBeginning": 9272, "ĠBloodhound": 9273, "ĠBazaLoader": 9274, "ĠBLIND": 9275, "ĠBlotchyQuasar": 9276, "ĠVMDKs": 9277, "ĠVIRUS": 9278, "ĠInventory": 9279, "ĠInvokes": 9280, "ĠOSTap": 9281, "ĠOSAScript": 9282, "Ġspreadsheet": 9283, "ĠWannaCry": 9284, "ĠWORKSTATION": 9285, "ĠWSReset": 9286, "ĠWhoami": 9287, "ĠReplicating": 9288, "Ġchosen": 9289, "ĠDelivery": 9290, "Ġadversarial": 9291, "Ġ`\\\\.\\`": 9292, "Ġseparate": 9293, "ĠLockerGoga": 9294, "ExternalPayloads": 9295, "ĠKextManagerLoad": 9296, "ĠKleopatra": 9297, "Ġlocalwebserver": 9298, "acquireLSA": 9299, "socketfilterfw": 9300, "ĠConstrained": 9301, "ĠContentType": 9302, "ĠConnecting": 9303, "ĠEnterprise": 9304, "Ġunzipped": 9305, "Ġunlikely": 9306, "Ġaltitude": 9307, "Ġalgorithms": 9308, "Ġarbitrarily": 9309, "Ġarchived": 9310, "Ġartifacts": 9311, "Ġaccessiblity": 9312, "LLMNR": 9313, "CreateCronjob": 9314, "Ġprivledges": 9315, "Ġprivilieges": 9316, "ĠDirectorySearcher": 9317, "Regsvcs": 9318, "Deobfuscate": 9319, "Ġembeds": 9320, "Ġclandestinely": 9321, "Ġprecautions": 9322, "Ġprecursor": 9323, "Ġpreparation": 9324, "Ġ1803": 9325, "ĠAzureAutomation": 9326, "Ġdelegatedas": 9327, "ĠatomicNotificationPackage": 9328, "Ġnoticed": 9329, "...\".": 9330, "Ġverbosity": 9331, ":\\\\..\\\\": 9332, "SystemRoot": 9333, "Ġobjectives": 9334, "Ġmodifiying": 9335, "ĠAuthority": 9336, "ĠAtomicRedTeam": 9337, "ĠUACDisableNotify": 9338, "SetupCommandsSection": 9339, "ĠRunPreSetupCommandsSection": 9340, "Atbroker": 9341, "Ġundocumented": 9342, "forensic": 9343, "Ġimpaire": 9344, "Ġappropriare": 9345, "Ġappealing": 9346, "ListCronjobs": 9347, "akteullen": 9348, "ĠSystemas": 9349, "ĠSpawnd": 9350, "Ġrestrict": 9351, "Ġsubdomains": 9352, "Ġinstallationwzzip": 9353, "LIBRARIES": 9354, "ĠCommunications": 9355, "ĠComponents": 9356, "ĠAltWinSock": 9357, "AtomicRedteam": 9358, "ĠCompatibility": 9359, "Ġmsfvenom": 9360, "printenv": 9361, "ĠDelegateExecute": 9362, "LOLBAS": 9363, "weekly": 9364, "ĠxClip": 9365, "ĠFireEye": 9366, "ExecIntoContainer": 9367, "ĠForwarding": 9368, "ĠKerberosPrerequisite": 9369, "PromptOnSecureDesktop": 9370, "mattifestation": 9371, "AllChecks": 9372, "Ġ,,,,,": 9373, "Ġpschildname": 9374, "Ġindustroyer": 9375, "ĠGraeber": 9376, "%\\...$.......": 9377, "CimProvider": 9378, "ForwardTo": 9379, "NetTCPConnection": 9380, "notransaction": 9381, "Ġantiphish": 9382, "Ġtransparently": 9383, "508226": 9384, "PUBLIC": 9385, "samaccountname": 9386, "ĠPreferences": 9387, "automatically": 9388, "BrowserStealer": 9389, "PENDING": 9390, "Ġsignificantly": 9391, "Ġdsenableroot": 9392, "Ġbitsdamin": 9393, "ĠCurrentTemperature": 9394, "ĠIntergrety": 9395, "ĠAtomicTestHarnesses": 9396, "ASRepRoast": 9397, "WORKSPACE": 9398, "Ġinturruption": 9399, "Ġmisconfigurations": 9400, "Ġdependency": 9401, "651033563": 9402, "DeviceGuard": 9403, "HuHuHUHoHo": 9404, "Quartelyreport": 9405, "usersdpsLight": 9406, "Ġrepository": 9407, "ĠMiniDumpWriteDump": 9408, "ĠNtWriteVirtualMemory": 9409, "InputArgs": 9410, "ĠDDEAUTO": 9411, "backgroundtaskmanagementagent": 9412, "068800": 9413, "FuncPtrs": 9414, "HiveNightmare": 9415, "XInitImageFuncPtrs": 9416, "Ġirreversibly": 9417, "ĠRtlCreateProcessReflection": 9418, "ĠWORKSTATIONThe": 9419, "ĠKextManagerLoadKextWithURL": 9420, "%\\...$.......::$": 9421 }, "merges": [ "Ġ t", "i n", "Ġ a", "e r", "o n", "h e", "e s", "Ġ s", "r e", "t e", "i s", "t i", "Ġt he", "Ġ c", "o r", "l l", "l e", "Ġ f", "Ġ w", "e c", "n d", "o m", "Ġt o", "in g", "e x", "Ġ p", "i t", "ti on", "u s", "Ġ d", "e n", "o w", "Ġ b", "m a", "i c", "e d", "a t", "Ġ us", "r o", "Ġ in", "ec u", "Ġ ex", "a r", "Ġ o", "a s", "l o", "Ġ A", "Ġa nd", "e t", "u n", "Ġ S", "a l", "es s", "Ġ C", "Ġex ecu", "Ġ T", "i le", "u t", "Ġ P", "i ll", "Ġ D", "t a", "er s", "h is", "Ġ v", "u l", "Ġw ill", "Ġo f", "it h", "a n", "a te", "Ġ n", "o d", "c ess", "Ġ re", "Ġ -", "Ġ U", "Ġb e", "Ġw ith", "es t", "a d", "r i", "W in", "Ġc om", "Ġf ile", "te m", "Ġ ma", "he ll", "y s", "Ġ E", "Ġ is", "p t", "i l", "Ġ m", "a tion", "is t", "Ġ on", "Ġ lo", "ow s", "c k", "Ġ (", "Ġ r", "Ġexecu tion", "ex e", "Ġ R", "ma nd", "Ġus ing", "o l", "v er", "i a", "Ġf or", "as s", "i f", "d ows", "Ġt h", "u r", "u m", "en t", "a m", "Ġ Win", "r om", "ys tem", "Ġt est", "c o", "p on", "p l", "Ġ M", "ĠT his", "Ġs u", "Ġ I", "c t", "Ġ l", "b le", "w or", "c cess", "Ġ L", "Ġcom mand", "q u", "c e", "Ġc on", "Ġp ro", "v e", "Ġa n", "i m", "Ġv ia", "a in", "c h", "Ġ h", "o t", "i re", "g e", "te d", "or y", "Ġb y", "Ġus er", "Ġ F", "d en", "e w", "o te", "r y", "Ġa d", "ow er", "Ġth at", "e m", "u p", "Ġd is", "wor d", "Ġ or", "ass word", "ĠWin dows", "i r", "Ġ it", "a y", "om ain", "Ġf rom", "Ġa t", "er v", "ĠE x", "k e", "Ġa s", "ic e", "Ġr un", "Ġc re", "Ġ \"", "ti l", "Ġd e", "s t", "ar y", "ccess f", "ĠP ower", "den ti", "t er", "Ġlo g", "Ġ H", "s ta", ") .", "a ll", "Ġs ystem", "o p", "it y", "ow n", "lo ad", "a re", "c ri", "i on", "Ġ G", "Ġ g", "Ġsu ccessf", "g ist", "a ble", "Ġs t", "i d", "S hell", "c tion", "Ġ en", "cri pt", "m in", "un t", "w n", "erv ice", "Ġp assword", "ĠU s", "l y", "Ġm od", "Ġ u", "Ġsuccessf ul", "i g", "c al", "o f", "Ġt his", "at a", "sta ll", "p ut", "Ġ e", "co unt", "gist ry", "Ġa c", "o ut", "ĠU pon", "ĠPower Shell", "U pon", "v ers", "Ġ B", "i p", "ĠD is", "c he", "f or", "Ġc an", "ĠC re", "t s", "ec h", "pl ay", "u re", "Ġ V", "Ġd omain", "co ver", "ire ct", "Ġdis play", "t es", "Ġ N", "il es", "at es", "a ck", "ĠA d", "i es", "ĠI n", "d er", "Ġ O", "Ġs p", "Ġw h", "Ġma y", "te n", "if y", "t ing", "Ġs h", "m d", "ĠT he", "ĠEx ecu", "ow ers", "ate d", "in u", "denti al", "of t", "irect ory", "u le", "w are", "owers hell", "Ġu til", "o st", "Ġexecu te", "inu x", "o u", "Ġpro cess", "own load", "Ġ /", "Ġ W", "ĠR e", "Ġac count", "i z", "in e", "Ġre m", "ti ve", "ta in", "ic ation", "P wn", "o us", "Ġs et", "Ġc h", "ar t", "ĠD e", "Ġn ew", "Ġad vers", "Ġdisplay ed", "Ġf iles", "cover y", "i qu", "n iqu", "um p", "Ġt ech", "re e", "od e", "Ġtech niqu", "Ġ `", "t r", "Ġus ed", "Ġd ata", "p er", "ol der", "Ġrem ote", "Ġs e", "Ġs cript", "um er", "ĠL o", "Ġre gistry", "Ġtechniqu e", "n t", "t ro", "i ew", "u d", "b l", "p le", "t o", "Ġs ervice", "Ġc md", "or t", "ol ic", "ĠDis covery", "a ge", "u ll", "Ġ y", "m ent", "om ic", "Ġma l", "E x", "p en", "Ġthe n", "as h", "Ġadvers ary", "O S", "Ġ K", "ro up", "Ġin stall", "Ġo ut", "i ous", "o ll", "t h", "Ġa ll", "ĠA n", "for ma", "Ġlo cal", "dential s", "B S", "forma tion", "Ġs hell", "Ġd ownload", "ĠS ystem", "Ġn ot", "ri v", "a un", "o ur", "s e", "he n", "Ġf un", "ĠA c", "Ġfun ction", "ul t", "Ġf older", "a c", "v ent", "Ġ .", "Ġ ke", "che d", "s o", "Ġ ro", "ic ious", "Ġus e", "op y", "olic y", "' s", "f a", "Ġin formation", "ĠA t", "am e", "o re", "ec t", "ur re", "ta ck", "an g", "urre nt", "T he", "om mand", "i ed", "o k", "s h", "Ġt im", "Ġs im", "ree BS", "reeBS D", "b s", "e nd", "ic h", "ic ro", "all y", "Ġp owershell", "lo g", "ĠS h", "ĠP ro", "ĠL inux", "Ġcre ate", "ter n", "Ġwh ich", "3 2", "s oft", "wor k", "Ġcon tain", "Ġsp ec", "p pl", "ĠC on", "Ġv ar", "an ge", "e l", "n ing", "Ġw as", "at h", "tem pt", "Ġl ist", "Ġh ost", "f y", "o ul", "le te", "Ġp er", "ĠE n", "icro soft", "oul d", "I n", "a g", "s i", "s ion", "Ġw e", "Ġl aun", "Ġcon f", "ec tion", "Ġd irectory", "Ġus ers", "Ġo pen", "as k", "Ġad d", "p p", "P ro", "Ġ un", "Ġa l", "Ġa r", "Ġa ccess", "as e", "et work", "ĠC h", "t ri", "u e", "Ġ if", "in d", "er e", "he ck", "is ten", "Ġd o", "Ġexecu ted", "Ġy ou", "C re", "L L", "y p", "Ġcommand s", "denti fy", "Ġutil ity", "S T", "Ġ i", "Ġc a", "us t", "bl es", "Ġout put", "ppl ication", "r ess", "v ir", "Win dows", "ĠM od", "Ġat tack", "Ġke y", "c OS", "z ure", "ta ble", "if ied", "t ory", "Ġ his", "ecu r", "ĠAd min", "Cre ate", "Ġhis tory", "Ġ k", "Ġt r", "er ver", "Ġp riv", "et h", "qu er", "ĠF reeBSD", "fa ult", "E n", "b o", "w all", "er n", "Ġp olicy", "Win Pwn", "ire wall", "Ġg roup", "vir on", "r u", "v o", "Ġc ode", "ĠS t", "al c", "ĠD irectory", "ers isten", "Ġv al", "rom pt", "viron ment", "a il", "e v", "g h", "m p", "in t", "ĠWin Pwn", "ĠUs e", "ĠRe gistry", "Ġvar ia", "eth od", "D is", "c l", "m on", "ic k", "ar d", "Ġmal icious", "ecur ity", "A C", "in ary", "Ġin to", "ĠExecu tes", "umer ate", "L o", "e ar", "f il", "Ġw in", "at or", "Ġat tempt", "Ġrun ning", "ĠG et", "oft ware", "Ġconf ig", "6 4", "f end", "v id", "Ġs c", "ro u", "ull y", "M I", "g r", "p o", "om p", "Ġre qu", "em ote", "iz e", "ched ule", "fil tr", "fend er", "A d", "I D", "R e", "T his", "a v", "g ing", "x t", "Ġ le", "Ġa re", "Ġf oll", "ay load", "Ġde fault", "tro l", "D e", "m is", "Ġ em", "Ġc l", "le ar", "Ġp re", "at ing", "ess ion", "ul ates", "Ġwith in", "mis sion", "L M", "a p", "u b", "Ġ Ġ", "Ġc urrent", "Ġexecu table", "Ġr es", "ĠF ile", "Ġad min", "ig n", "th er", "Ġtim e", "0 0", "S I", "Ġ 1", "ec on", "ĠA D", "ĠA zure", "ĠD LL", "od ed", "Ġcom p", "ist r", "Ġcre dentials", "Ġde le", "ĠAd d", "Ġfoll ow", "a nd", "a wn", "d o", "p ort", "ar ies", "ul es", "Ġma cOS", "um ent", "Ġat omic", "for m", "tro ll", "Ġpriv ile", "f f", "er o", "Ġc heck", "ĠS ervice", "ir es", "Ġst d", "id den", "Ġen vironment", "Ġmod ify", "ĠCre ates", "ĠCre dentials", "ersisten ce", "Ġval ue", "Dis able", "A P", "a ct", "Ġ 2", "Ġt ask", "Ġa b", "Ġexecu tes", "ers ion", "ol um", "am ed", "Ġset ting", "rou gh", "Ġstd out", "c oded", "f er", "i ti", "k s", "p ad", "te ction", "Ġc alc", "or er", "Ġp r", "Ġb o", "Ġo ver", "et c", "an s", "ote pad", "put er", "Ġro ot", "vo ke", "olum e", "V iew", "j ect", "r it", "Ġt ar", "re at", "Ġd ump", "Ġb inary", "ĠC ommand", "Ġma n", "ĠM icrosoft", "em ory", "ĠH T", "Ġst art", "Ġsh ould", "ĠAc tive", "tri b", "Ġfollow ing", "troll er", "D omain", "E M", "L inux", "f ter", "t u", "Ġ J", "et s", "Ġv iew", "Ġn o", "ĠU til", "ad ow", "pl orer", "Ġmod ule", "che s", "Ġinstall ed", "Ġvaria ble", ". .", "a ve", "u il", "ti v", "ĠA pplication", "ĠP owershell", "Ġv er", "Ġcom ple", "pt ure", "Ġh as", "ĠDe fender", "Ġwin dows", "istr ator", "d u", "d it", "g es", "o ve", "p ro", "w d", "Ġs o", "Ġc opy", "ex t", "Ġp rompt", "ma ge", "ĠD ata", "Ġwith out", "Ġth rough", "ur ation", "ĠUs er", "Ġsp awn", "ud it", "ern el", ": \\", "A M", "S O", "a bles", "c ry", "p lo", "Ġs ession", "Ġw hen", "Ġm ess", "ĠI dentify", "ĠH K", "ĠCre ate", "Ġse e", "Ġspec ified", "Pro cess", "cl ud", "chedule d", "C on", "S h", "b it", "l ine", "n c", "n ce", "r on", "Ġa ut", "Ġc all", "Ġp ayload", "Ġn etwork", "Ġm ethod", "Ġon ly", "Ġcre ated", "Ġlog s", "ig h", "Ġch ange", "ĠLo g", "Ġmal ware", "ĠAc count", "S H", "S ystem", "Ġs erver", "ti c", "or d", "ec ted", "Ġb ash", "Ġre c", "Ġlo ad", "Ġl i", "Ġpro vid", "Ġh ave", "em p", "ĠExecu tion", "Ġper mission", "Ġlaun ch", "ru te", "filtr ation", "Ġab out", "L E", "a ke", "g ed", "n ame", "r ary", "t xt", "Ġ '", "es k", "ti f", "Ġto ol", "ing le", "Ġp ip", "Ġp ath", "Ġo b", "ĠUs ing", "Ġmod if", "E T", "I ST", "b ed", "t op", "y th", "Ġ $", "Ġ es", "Ġ up", "er min", "Ġf irewall", "Ġus es", "Ġin ter", "Ġo ther", "ĠA ut", "ĠD omain", "ul ts", "Ġcom puter", "Ġdis able", "Ġal so", "f o", "p ass", "Ġ j", "Ġ quer", "om e", "Ġp ar", "Ġp ack", "ma r", "Ġn amed", "Ġn otepad", "Ġlo c", "op ies", "ech o", "Ġutil iz", "ĠK e", "our ce", "Ġver ify", "Ġmess age", "yth on", "S X", "a ch", "Ġs ta", "Ġs ingle", "Ġc oll", "Ġb uil", "ĠT o", "ĠD ownload", "am ple", "ĠM ac", "Ġit s", "ĠG roup", "Ġst ore", "id e", "ĠAd vers", "ĠExecu te", "ou nd", "ĠAt omic", "tern al", "Ġper form", "Ġconfig uration", "econ d", "Ġpermission s", "B A", "D ump", "N S", "b al", "e ed", "Ġ z", "Ġt emp", "Ġs econd", "re en", "is h", "Ġw or", "Ġd ec", "ar p", "as ed", "lo ck", "ĠS et", "ĠT h", "ul ate", "ĠU AC", "ri te", "Ġm emory", "ĠR emote", "im i", "ĠN T", "ĠO ut", "ree bs", "Ġy our", "ĠAdmin istrator", "gr am", "reebs d", "C urrent", "F I", "P ower", "S et", "T P", "a b", "f ile", "n et", "r or", "Ġ 3", "Ġ Q", "Ġ echo", "Ġa fter", "er b", "Ġs erv", "Ġthe ir", "en er", "en si", "ĠC opy", "Ġma ch", "ĠR un", "ur l", "ur ing", "ĠV olume", "Ġprocess es", "ok mar", "Ġsim ulates", "Ġi dentify", "De lete", "Ġpre vent", "Ġpip e", "FI LE", "A T", "M icrosoft", "P ack", "W MI", "f reebsd", "r ows", "s s", "le t", "Ġp l", "en ce", "Ġb ut", "ĠT est", "ĠP assword", "ad min", "Ġcom mon", "ct or", "Ġan y", "Ġe nd", "Ġe vent", "tr act", "Ġro le", "ĠMod ify", "ear ch", "Ġprivile ges", "Ġmodif ication", "bed d", "A t", "I N", "Y ST", "a pture", "f ully", "g et", "o o", "Ġ 0", "Ġt yp", "Ġp ersistence", "ic es", "ic ate", "ĠS oftware", "Ġn eed", "Ġbe ing", "ver y", "am es", "am et", "Ġor der", "ir tu", "ĠUs es", "Ġu nd", "ĠV BA", "Ġse en", "umer ation", "Ġbuil t", "YST EM", "irtu al", "D P", "R E", "S cript", "a tive", "c ol", "p tion", "p assword", "u nd", "x y", "on e", "Ġc er", "Ġf ind", "Ġb ack", "Ġin s", "Ġin clud", "ĠS SH", "ĠP ython", "Ġof f", "Ġn et", "ĠR ed", "if ic", "ĠM an", "Ġsu do", "Ġcon ten", "ĠF irewall", "Ġlog on", "Ġlog ging", "ĠH IST", "gist er", "Ġch ang", "ĠLo cal", "to col", "so le", "Ġtim es", "ĠSh are", "ĠSh adow", "Ġwe b", "ĠCh rom", "po int", "iti es", "esk top", "ĠAdvers aries", "ensi tive", "1 0", "C ommand", "a ce", "b in", "d ev", "g ain", "h av", "l i", "l ag", "Ġ own", "Ġt ext", "Ġa gain", "Ġs ys", "Ġs cheduled", "Ġthe y", "Ġw rit", "Ġd uring", "ar k", "lo bal", "ĠS hell", "ĠS im", "ĠC opies", "ĠU n", "ad ing", "ĠR o", "Ġsu ch", "ct l", "Ġl s", "Ġpro du", "Ġh idden", "ire d", "Ġat trib", "Ġlog in", "Ġsystem s", "Ġen umerate", "Ġwh at", "ĠW MI", "Ġaccount s", "Ex ecu", "ĠPro cess", "Ġar g", "yp ass", "Ġem bedd", "ument s", "hav i", "I S", "S t", "a f", "b ash", "d e", "d ump", "f ore", "k at", "Ġ im", "in stall", "Ġa pp", "Ġa ctor", "ex ec", "us e", "ĠS c", "Ġv ersion", "an t", "Ġm ust", "ĠR es", "Ġcon trol", "Ġsuccessf ully", "ĠN etwork", "ĠIn stall", "Ġcontain ing", "In stall", "Ġk ernel", "Ġsetting s", "ĠUtil ize", "ĠHK LM", "ĠKe y", "SX i", "kat z", ". \"", "1 1", "G et", "L ist", "R emote", "S S", "T o", "a k", "b ject", "c s", "l ack", "n ection", "p s", "s cript", "v es", "Ġ er", "re am", "Ġthe m", "Ġc lear", "Ġd ri", "Ġo bs", "ĠS ys", "ut es", "ad e", "Ġlo ck", "Ġr ules", "ur es", "ĠM SI", "qu ires", "ce l", "Ġcon sole", "ĠEx plorer", "Ġcre ates", "Ġde lete", "ĠPower View", "Ġen able", "Ġen cry", "ĠDis able", "Ġsh are", "Ġdata b", "ĠK erb", "Ġspec ific", "ick et", "Ad d", "Ġcomp ress", "Ġ2 0", "ans om", "Ġtar get", "bit rary", "tif icate", "rows er", "Ġend point", "und ll", "' t", "C h", "I f", "R un", "U s", "W S", "` .", "b er", "d ll", "h er", "s v", "u er", "Ġ ip", "on g", "Ġs ome", "le v", "Ġp o", "Ġd et", "Ġb ase", "Ġb ased", "at er", "ar ted", "Ġo per", "ĠA P", "ĠS p", "ĠP er", "ĠP olicy", "ta mp", "Ġre n", "Ġma in", "Ġr est", "ĠR em", "Ġsu b", "Ġl ine", "ĠL D", "Ġpro gram", "ch ing", "Ġde f", "Ġg ener", "Ġpassword s", "Ġe v", "ten sion", "art up", "Ġinstall ation", "Ġke ys", "tern ate", "ĠCon troller", "In voke", "Ġi mage", "bo ot", "Ġsc reen", "ign ed", "ff ice", "tiv ity", "plo it", "Ġli ke", "Ġpar amet", "Ġsecond s", "ĠTh reat", "ĠOut put", "Ġmach ine", "Ġtimes tamp", "Ġagain st", "Ġembedd ed", "D S", "F W", "L I", "p or", "t y", "u te", "u age", "u ally", "Ġ ent", "Ġa v", "Ġa udit", "Ġs ecurity", "ti m", "Ġf ir", "en v", "Ġex ist", "ĠC om", "Ġre tri", "Ġbe havi", "tem p", "ĠI IS", "ĠL ist", "ĠF iles", "Ġrun s", "Ġcre dential", "Ġde tection", "Ġg et", "Ġmod e", "ĠB lack", "Ġwh ere", "ĠDe lete", "ĠAt tempt", "ang uage", "Ġdo c", "Ġdo es", "Ġdele tes", "igh t", "Ġstore d", "Ġwor k", "ĠChrom e", "Ġer ror", "Ġfir st", "C omp", "F reeBSD", "M L", "N ote", "O M", "O bject", "P ath", "S A", "U til", "c ted", "n er", "o b", "r ing", "t est", "y nc", "Ġa pplication", "le an", "Ġf ound", "Ġw ould", "nd ard", "us p", "ĠA l", "ĠS ecurity", "ĠC apture", "Ġexecu ting", "ĠP riv", "il ter", "ist ory", "Ġth reat", "ĠI P", "Ġdis k", "Ġlog ged", "Ġe ach", "ĠDis ables", "ĠW hen", "ĠLo ot", "Ġlaun ches", "ĠCh ange", "ust om", "Lo cal", "Ġrequ ires", "ĠHT TP", "Sh arp", "Ġquer y", "imi katz", "Power Shell", "ab il", "ĠQ uer", "okmar ks", "At omic", "ansom ware", "A N", "C opy", "M D", "N ET", "T W", "a ult", "c c", "c om", "e b", "e at", "g g", "g le", "i tion", "m od", "r c", "â Ģ", "Ġ 5", "Ġ he", "in k", "Ġs oftware", "Ġs ource", "Ġs ensitive", "te cted", "Ġb lock", "Ġin put", "Ġex e", "un c", "ĠS cript", "ĠS earch", "ĠC heck", "ĠC omp", "ĠD NS", "an n", "ĠE vent", "Ġfor ce", "Ġas s", "Ġst ring", "ĠIn voke", "Ġset s", "Ġadvers aries", "Ġcontain s", "Ġlaun ched", "ĠCh ang", "Ġattack s", "bo x", "Lo g", "Con trol", "Ġaut om", "Ġserv ices", "oo gle", "Ġund er", "Ġconten ts", "Ġdatab ase", "ĠKerb ero", "ĠLD AP", "lean up", "usp icious", "\" .", ") ,", "H K", "S ervice", "S ecurity", "V ersion", "Y ou", "` ,", "c ip", "e am", "i ve", "j ection", "l er", "t he", "w in", "z ip", "Ġt ri", "in cip", "te nd", "te ct", "or ma", "Ġf lag", "Ġp ass", "ma cOS", "Ġin f", "Ġin sta", "ĠS YSTEM", "ĠT ask", "ĠP ersistence", "Ġn on", "Ġn um", "Ġn ame", "Ġre g", "Ġbe en", "ĠE dit", "il ar", "Ġm s", "ĠR DP", "ol d", "am per", "ĠM al", "ĠI f", "Ġcon troller", "Ġby pass", "Ġdis cover", "Ġde v", "ĠH idden", "ĠG oogle", "Ġmod ified", "ĠB ypass", "ĠO ffice", "Ġwh o", "Ġutil ize", "Ġremote ly", "Ġall ow", "ĠAt tack", "log on", "En umerate", "Ġvaria bles", "Ġrequ ired", "Ġdele ted", "Ġstart up", "ĠJ Script", "ĠMac OS", "Current Version", "ĠSc an", "Ġparamet er", "ĠQuer y", "incip al", "A D", "A zure", "C om", "M od", "O N", "P X", "P assword", "T r", "c p", "c ed", "e ve", "f us", "p r", "p ted", "s quer", "u ccessf", "Ġ X", "Ġa ction", "he s", "ti es", "Ġc leanup", "ec re", "Ġp art", "Ġb rute", "Ġex tract", "Ġex tension", "as t", "ĠA V", "ĠA ccess", "ĠA pp", "ĠP S", "Ġv ul", "Ġv irtual", "cess fully", "pt y", "Ġsu cessfully", "Ġl ater", "Ġpro per", "Ġh ow", "ir m", "ĠPower Sharp", "ĠG lobal", "Ġg o", "of f", "ĠB o", "ĠB ash", "ĠCre dential", "ĠN o", "ĠRe quires", "tr a", "Ġcmd let", "ĠK ernel", "Ġdownload ing", "si exec", "Ġconf irm", "Ġadd ed", "Ġar bitrary", "ĠMod ule", "Ġk n", "ern et", "ĠĠ ĠĠ", "fer ence", "Ġdump ed", "ĠAut o", "pass wd", "Ġutiliz ing", "Ġz ero", "ĠSet ting", "ĠHIST FILE", "Ġenable d", "ĠAP I", "Ġav ail", "Ġbehavi or", "SA SS", "ĠChang es", "fus c", "ĠPowerSharp Pack", "A RE", "C lear", "E R", "E SXi", "F ile", "I T", "P wd", "R L", "U ID", "a le", "c on", "c md", "c ommand", "e ver", "f t", "f ig", "j ec", "u tion", "y m", "Ġ %", "Ġp ort", "Ġd ll", "Ġd if", "en se", "Ġin fo", "Ġex filtration", "ĠA ll", "ĠC ent", "ĠD o", "Ġv olume", "ith er", "Ġbe fore", "il d", "Ġth ere", "ur n", "ĠM ethod", "ĠL SASS", "ĠEx cel", "ĠH istory", "Ġst arted", "Ġe very", "Ġe lev", "Ġe ither", "ĠW ord", "iz ing", "ĠDe le", "Ġse ar", "ud o", "ĠK ub", "aun ch", "hen tic", "Ġsim ilar", "ĠPro tocol", "tern et", "ĠEn umerate", "ag er", "si ve", "Ġadd ress", "Ġgroup s", "ail s", "Ġattempt s", "Ġconfig ure", "Ġle ver", "Ġem pty", "Ġ1 0", "and ler", "fer ent", "Ġbo x", "Ġbo ot", "Ġman ually", "ĠHT ML", "tu til", "ĠUtil izing", "pro cess", "Ġprovid ed", "ĠGroup s", "Ġchang ed", "Ġls ass", "Execu te", "Ġapp ear", "Ġmain tain", "ploit ation", "Ġent ry", "abil ity", "Ġnum ber", "Ġvul ner", "ernet es", "ĠSetting s", "Ġdif ferent", "ĠKub ernetes", "1 5", "3 6", "A ccess", "A pp", "B it", "D ata", "F TW", "L O", "O R", "T EM", "U S", "c ut", "c tive", "c ode", "g iti", "h or", "l s", "m un", "m Pwd", "n ti", "n ull", "s ervice", "s ync", "t mp", "u al", "w e", "Ġ 4", "Ġ 7", "Ġ x", "Ġ You", "Ġt ry", "Ġc ustom", "ll y", "Ġf ew", "Ġf eat", "Ġp ri", "Ġd esktop", "ma te", "ic ally", "Ġex p", "ĠA WS", "ĠS M", "ĠC A", "ĠC lear", "ĠP ayload", "ta nce", "an ce", "ĠU PX", "Ġma il", "ĠE m", "Ġm ight", "ation s", "Ġon e", "Ġr ule", "rom is", "pl ic", "ĠI mage", "Ġcon nection", "im e", "ch ost", "ĠF ire", "ĠEx filtration", "Ġen umeration", "ĠN ote", "ĠO ver", "ĠO pen", "iz ation", "ort cut", "Ex ec", "ĠAt trib", "Ġar t", "Ġca che", "Ġca pture", "Ġattack er", "Ġtr unc", "ĠSt op", "ersisten t", "ev ed", "Ad mPwd", "Ġle giti", "Ġcomp romis", "du ct", "SO FTW", "plo y", "Ġprovid e", "ermin al", "Ġpack ets", "Ġtemp or", "ĠNT DS", "Ġpl ac", "Ġdri ver", "Us er", "win dows", "tend ed", "ĠMal ware", "ĠAttack ers", "uccessf ul", "sive ly", "Ġconfigure d", "TEM P", "Ġlegiti mate", "SOFTW ARE", ". ,", "C U", "I G", "P O", "a bl", "a tic", "b rary", "c ron", "e ll", "f w", "h ip", "n al", "n ake", "o ok", "p a", "r es", "s ing", "w rite", "Ġ <", "Ġ |", "in ed", "in al", "er ve", "er tificate", "Ġs te", "re ad", "te xt", "Ġf ull", "Ġw ish", "Ġp or", "Ġp ost", "en coded", "Ġin tended", "as quer", "al ity", "ĠC l", "ĠC MD", "ĠT eam", "ĠP s", "ĠP ort", "ers hip", "ul ti", "ul ating", "Ġn umer", "Ġre ad", "Ġma squer", "Ġm ulti", "Ġr ansomware", "ĠI t", "Ġl anguage", "Ġpro file", "Ġpro xy", "Ġuser name", "ĠF or", "ĠF rom", "Ġcre ation", "Ġg u", "ĠB rowser", "ip bo", "ĠV M", "ĠV BS", "Ġutil ities", "ĠW ith", "Ġse nd", "Ġscript s", "our nal", "se l", "Ġlist s", "ag es", "Ġopen ed", "ere q", "ĠMod if", "Ad min", "Ġcl ass", "ap h", "Ġres ults", "Ġcopy ing", "Ġtool s", "Ġob tain", "Ġes cal", "Ġup d", "Ġquer ies", "ternal s", "Ġz ip", "Ġown ership", "Ġsys log", "ĠUn install", "ĠRes ults", "Ġobs erve", "Ġdet ermin", "ĠRem ove", "Ġhe l", "HK LM", "ĠEdit or", "Ġdev ice", "Mod ify", "ipbo ard", "2 1", "3 3", "C P", "C LI", "E Y", "H M", "I tem", "N C", "N o", "O pen", "T est", "T amper", "Z E", "a use", "b od", "b unt", "c i", "d omain", "f le", "g ine", "g sv", "h ost", "m cs", "n ect", "p y", "s es", "w ill", "w hen", "Ġt w", "Ġt ake", "Ġt icket", "in es", "in it", "on it", "Ġs ame", "Ġc r", "Ġc ould", "Ġc url", "or re", "Ġw rite", "Ġw ant", "it s", "Ġb in", "Ġex filtr", "Ġex ample", "ar i", "as es", "as ic", "as ion", "lo ok", "ĠA fter", "ĠS erver", "ĠC HM", "ĠP r", "ĠD esktop", "ta bl", "ta bles", "ul ar", "Ġre d", "Ġre boot", "pt ures", "ck er", "ck Bit", "ĠR AT", "ĠM o", "Ġl ong", "ĠL AP", "ve l", "ch i", "Ġh ash", "ote nti", "em on", "Ġdis covery", "Ġde fender", "ĠH el", "Ġst ream", "Ġen coded", "Ġen ables", "Ġmod ules", "Ġu pon", "ĠV iew", "ĠIn jection", "iz ed", "ĠLo ad", "olic ies", "Ġall ows", "sh ark", "Ġcontain er", "Ġcontain ers", "Ġspec ify", "Ġvar i", "ag ing", "Ġtr ick", "vo id", "SI ZE", "Ġcomp ile", "do c", "Ġprivile ge", "Ġbo okmarks", "Ġno bod", "ove ment", "Ġcall ed", "Ġob fusc", "Ġes tabl", "fo x", "Ġj ournal", "Ġutiliz es", "Ġcoll ect", "ĠMac ro", "Pack et", "Ġarg uments", "Ġlike ly", "AN D", "gg er", "ĠKerbero s", "Ġgo ing", "Ġavail able", "jec ts", "hentic ation", "Ġfeat ure", "ĠSM B", "abl ing", "Ġpor ts", "asquer ading", "Ġmulti ple", "Ġdetermin e", "bunt u", "ĠLAP S", "Ġnobod y", "2 7", "5 5", "C K", "D NS", "F ind", "F ault", "H ound", "L ine", "P r", "P rompt", "S erver", "S oftware", "S YSTEM", "S uspicious", "S uccessful", "T ime", "U FW", "a ys", "g an", "i x", "i ves", "k it", "l d", "l ink", "n a", "p d", "p f", "p ec", "v chost", "Ġ *", "Ġ =", "Ġ ri", "Ġt shark", "in ternals", "Ġa chi", "er Fault", "Ġs sh", "Ġs ample", "Ġs vchost", "te ad", "Ġthe se", "Ġc ron", "le ts", "Ġf ilter", "Ġw script", "om plic", "Ġp at", "Ġp ers", "us ter", "Ġd irect", "ma t", "Ġex ternal", "ar ts", "ar act", "ĠA r", "ĠC r", "ĠC md", "ĠC ode", "ĠT icket", "ĠP AM", "ĠD ump", "ul ation", "Ġre l", "ĠU nc", "ĠU FW", "ĠE X", "ĠE v", "Ġm ore", "Ġlo ok", "ck e", "Ġr an", "ur sively", "am ine", "pl y", "ĠM emory", "Ġl ast", "Ġan ot", "Ġh igh", "ĠF older", "ry pt", "em b", "are nt", "ĠG PO", "Ġg ain", "Ġen s", "put ers", "Ġac tive", "Ġac tivity", "ĠB y", "ĠV irtual", "ack et", "ĠO n", "Ġsp o", "per ties", "age ment", "Ex amine", "Ġdownload ed", "ĠAc tivity", "Ġfunction ality", "fa ce", "ĠPro xy", "ĠEn coded", "Ġwe ll", "Ġattack ers", "En able", "ĠSt artup", "Ġsc ann", "Ġle vel", "Ġcl uster", "Ġres ult", "Ġpr int", "Ġpr incipal", "rit es", "SO CK", "cry pt", "ĠLog s", "Ġrec ursively", "Ġloc ale", "Ġcoll ection", "Ġcoll ected", "Ġwor ks", "Ġserv ers", "okmar k", "Ġtyp ically", "Ġcer tificate", "Ġinclud ing", "ĠMan ager", "ĠRo ot", "ĠRo cke", "Ġattrib utes", "Ġattrib ute", "St artup", "Ġlock ed", "Ġencry pt", "ĠPer mission", "Ġdef ined", "tim e", "Ġdoc ument", "Ġdoc uments", "Comp ress", "com mon", "Ġautom atic", "orma l", "ecre ts", "Ġkn own", "Ġelev ated", "ĠEm ulates", "ĠFire fox", "ĠAttrib utes", "Ġtempor ary", "ell o", "Ġnumer ous", "Ġhel p", "gsv r", "onit or", "Ġri gh", "omplic ated", "aract er", "ĠUnc omplicated", "Ġanot her", "Ġscann ed", "\" ,", "A L", "A R", "A ll", "A ut", "A ss", "A ctive", "C OM", "G ate", "I B", "M siexec", "M AND", "N etwork", "P F", "P owershell", "P AC", "P ID", "R M", "U n", "U se", "W eb", "\\ \"", "a emon", "b ot", "b all", "b pf", "e p", "h old", "i al", "i ent", "k en", "l es", "l ist", "n ess", "p re", "r ay", "v an", "v iew", "x ity", "z ill", "Ġ ,", "Ġ 6", "Ġ >", "Ġ qu", "Ġ id", "Ġt er", "Ġt cp", "Ġa void", "es c", "es ted", "Ġs chedule", "Ġs av", "Ġp s", "Ġp ersistent", "us er", "us ts", "Ġd es", "Ġb ec", "ma il", "Ġin d", "Ġex ploitation", "ar es", "et ch", "ĠS af", "ĠC oll", "ile nt", "ut l", "ĠD en", "ta ge", "ul ator", "ith ub", "Ġn ative", "Ġre gister", "ĠE very", "ĠE SXi", "Ġm imikatz", "Ġr undll", "ĠR undll", "Ġfor mat", "Ġth us", "ur po", "ĠWin logon", "ĠI D", "Ġl isten", "ĠL aunch", "Ġcon n", "Ġcon s", "ire ction", "ĠEx port", "st r", "ĠH ost", "ĠH ash", "cri ption", "ĠG r", "ĠG u", "ĠO S", "ĠO per", "Ġrem ove", "Ġch oo", "Ġ` /", "umer ates", "Ex p", "Ġinstall er", "Ġshell code", "Ġdownload s", "so ci", "Ġsim ple", "Ġsim ulate", "Ġsim ply", "ĠSh arp", "tern ative", "ĠCon trol", "ĠCon fig", "ĠEn umeration", "Ġopen ss", "Ġadd ing", "Pro duct", "Ġal ternate", "Ġar p", "ind ow", "Ġtr usts", "ĠSt ream", "Dis cover", "rou nd", "Ġrequ est", "ĠHT A", "Ġcomple ted", "Ġcomple tes", "Ġcomple xity", "ĠHK EY", "ĠLog in", "ĠLog ging", "Ġload ed", "tif ication", "Ġpack ed", "Ġloc ation", "ĠTo ol", "Ġdec od", "Ġdec ode", "ĠNT LM", "Current Control", "Ġins ide", "Ġinclud e", "Ġoff line", "ĠMan ip", "Ġprodu ct", "Ġprodu ction", "Execu tion", "St art", "Ġencry pted", "Ch ange", "Ġip tables", "Ġdet ails", "Ġren amed", "por ting", "Ġexist s", "Ġretri eve", "ĠList s", "ition ally", "Ġinsta nce", "ĠDele tes", "US ER", "mun ication", "Ġpri or", "ĠClear s", "Ġtrunc ate", "Ġcompromis ed", "Ġplac ed", "ĠPs Exec", "Ġmasquer ade", "ĠFor ce", "Ġescal ation", "ĠMo zill", "Ġvari ations", "Ġestabl ish", "Ġrel ated", "Ġspo ol", "Ġrigh ts", "COM MAND", "Ġopenss l", "CurrentControl Set", "ĠMozill a", "% \\", "1 6", "4 0", "A WS", "B ypass", "C a", "C o", "C im", "C md", "C ertificate", "D LL", "E dit", "F or", "H IST", "H ello", "K ET", "M al", "M asquerading", "N et", "P P", "P olicies", "R A", "R O", "S R", "S cheduled", "S top", "S earch", "U AC", "W D", "W ith", "W hen", "\\ \\", "] .", "a udit", "c ation", "d ow", "d own", "f ense", "j ack", "k es", "l ess", "m i", "m ic", "m et", "n n", "n s", "n am", "n ot", "o s", "o gr", "p g", "r ic", "r un", "r ame", "s ance", "u bl", "u fw", "v ar", "w rites", "y nam", "in ter", "es fully", "Ġs w", "re d", "is sance", "Ġthe password", "Ġthe ft", "Ġc at", "Ġc opies", "Ġc orre", "Ġf ur", "Ġf am", "Ġto ken", "Ġp ower", "Ġp otenti", "us h", "Ġd on", "Ġd est", "Ġd own", "Ġb at", "ma in", "ma ges", "at us", "Ġex ec", "Ġex it", "as hes", "ĠS ear", "ĠS po", "ĠS ession", "ĠS IG", "ĠS nake", "al t", "ĠC an", "ĠC alc", "ĠT r", "ĠP op", "ĠP acket", "ĠD ll", "ĠD ark", "Ġof ten", "Ġn ote", "Ġre t", "Ġre fle", "Ġre main", "ĠU RL", "ĠU NC", "ĠU pd", "ri es", "Win logon", "Ġcom munication", "Ġma r", "ĠE d", "ĠE SX", "Ġm e", "ck et", "ck ets", "ĠR econ", "ĠM ail", "Ġsu cc", "ĠI de", "qu est", "Ġan ti", "Ġh ives", "Ġby tes", "ĠF ind", "ir us", "ir ation", "erv ed", "Ġde ploy", "st ru", "ĠH andler", "ĠG ener", "Ġg r", "Ġg ithub", "Ġst op", "wn er", "ĠUs ers", "ĠB IT", "ĠV ia", "ĠV IB", "ĠN ew", "ack up", "ĠO wner", "Ġsh ow", "ĠExecu table", "ĠW erFault", "Ġset up", "Ġch mod", "Ġch ild", "ĠDe fense", "Ġtechniqu es", "Ġcmd lets", "Ex filtration", "fa ults", "sh ta", "sh ot", "sh adow", "ĠPro perties", "ĠCon tain", "ath er", "ĠEn vironment", "ĠEn gine", "Ġadd s", "Ġun til", "Ġi mages", "Ġca p", "Ġtr ans", "En coded", "alc on", "Lo ckBit", "Re gister", "Ġcl ipboard", "Ġcl ient", "Ġres ource", "Ġadmin istrator", "00 1", "istr ative", "Ġprivile ged", "Ġtask s", "ĠJ SO", "tiv ate", "pro c", "nc es", "Ġrec ent", "Ġrec ord", "Ġob ject", "Ġj ust", "ĠKe ys", "Set ting", "Ġmach ines", "Ġcommon ly", "Ġtyp e", "Ġcer tutil", "Ġins tead", "Ġnet sh", "Ġconten t", "Ġown er", "Ġwrit es", "Ġwrit ing", "Ġwrit ten", "ĠSim ulates", "ĠSim ulate", "Ġobs erved", "ĠSys mon", "Us ers", "Ġpo int", "Ġoper ation", "ĠSp awn", "ĠPer form", "Ġren ames", "Ġrest arts", "Ġscreen shot", "por ted", "Ġexist ing", "ĠAl ternate", "ĠHTTP S", "Ġblock ing", "Ġass emb", "Ġtri gger", "Ġinf ected", "Ġinsta nces", "old ers", "Com puter", "ĠApp Cmd", "Ġhow ever", "ĠBo okmarks", "ĠCent er", "Ġlever aging", "Ġvulner able", "sel f", "Ġupd ated", "ĠHel p", "gan ogr", "na issance", "Ġachi eved", "ĠCmd let", "PAC KET", "Ġchoo sing", "rame work", "Ġfur ther", "Ġfam il", "ĠSear ches", "ĠDark Gate", "Ġrefle ct", "ĠUpd ate", "Ġsucc esfully", "ĠIde ally", "ĠBIT S", "ĠJSO N", "Ġassemb ly", "ganogr aph", "\" )", "* .", "1 2", "1 9", "2 4", "3 5", "4 4", "5 0", "B ase", "C M", "C ron", "C AL", "D esk", "E L", "E X", "E vent", "H IN", "H EL", "M ac", "M AC", "N T", "N AM", "P C", "P N", "P U", "P re", "P ort", "R econ", "R HEL", "S c", "S up", "S udo", "T E", "U I", "b y", "c a", "c es", "c at", "c all", "c omp", "c Dump", "d st", "d mp", "e us", "f ish", "g er", "g ress", "h ing", "h alt", "i v", "i te", "i ble", "i jack", "l ow", "l ate", "m b", "n e", "n g", "n ames", "o se", "p h", "p ower", "p ull", "p tance", "p ush", "r ar", "r ation", "r sync", "s a", "s si", "t or", "u es", "u til", "w ard", "z ero", "Ġ &", "Ġ 8", "Ġ 32", "Ġt or", "Ġt erminal", "in ation", "he d", "es ent", "Ġs ay", "Ġs ection", "Ġs igned", "Ġs uspicious", "Ġs ym", "re gister", "is tance", "ti t", "ti re", "Ġc lo", "Ġc am", "Ġc script", "or es", "Ġw ay", "Ġw mic", "Ġp ing", "Ġp od", "Ġp urpo", "it es", "it ch", "us ion", "Ġd en", "en ta", "en ted", "ow dst", "Ġb it", "Ġb en", "Ġb ad", "ma st", "ro p", "Ġin jects", "ecu re", "Ġex port", "Ġex plorer", "Ġex clud", "as ting", "lo cal", "ĠS ets", "ĠS ilent", "al ue", "ile d", "ut down", "ĠP re", "ĠP ass", "ĠP rompt", "ĠP ID", "ers on", "Ġv ault", "an ting", "Ġn ames", "Ġn ormal", "Ġre pl", "Ġ- >", "ĠU ID", "ĠU buntu", "ad er", "ri ke", "Ġcom bin", "Ġcom puters", "tem s", "ĠE s", "Ġm siexec", "Ġon ce", "Ġr and", "Ġr sync", "ĠR ec", "ĠR ansomware", "Ġth res", "ĠWin dow", "ĠM S", "ĠM onitor", "ĠL anguage", "qu is", "ce ptance", "Ġpro tection", "Ġpro gress", "Ġh and", "ot net", "Ġuser names", "ĠF alcon", "Ġad van", "Ġit self", "erv ices", "Ġas soci", "Ġ\" $", "sta ndard", "Ġsystem d", "Ġsystem ctl", "Ġen tire", "Ġe mail", "Ġac ceptance", "ĠB rute", "ĠB asic", "ĠDis cover", "for ce", "ĠN on", "ĠN ot", "ĠN otepad", "ĠIn line", "Ġsh ortcut", "ĠRe port", "Ġrem o", "Ġch own", "Ġch ann", "Ġmal doc", "Ex tract", "ĠSystem d", "Ġfunction s", "ched ul", "Ġro ut", "ĠPro tection", "ppl ied", "ĠCon nect", "Ġvar ious", "Ġlist ing", "ĠEn umerates", "Pro vid", "Ġal ong", "ere quis", "yp e", "Ġca ching", "Ġca ptures", "Ġtr ap", "Ġpriv ate", "En crypt", "ĠSt art", "Ġval id", "cl usion", "ick ets", "De tect", "Ġem ulate", "Ġcl ick", "ub eus", "Ġres et", "Ġadmin istrative", "ign ment", "ĠAdd s", "ĠAdd itionally", "ff ect", "Domain G", ".. .", "ĠApplication s", "Ġcomple te", "Ġcomple tion", "Ġhas hes", "pro file", "Ġcall out", "Ġmethod s", "Ġrec on", "Ġli brary", "Ġinter face", "ĠAut om", "Ġloc ally", "Ġsta ge", "Ġsta ging", "Ġsta ndard", "imi ted", "ĠOut look", "ĠAdministrator s", "Power View", "Ġpl ace", "ĠPassword s", "IN T", "Ġund e", "Ġbuilt in", "ption s", "Ġchang es", "lag s", "Ġprodu ce", "Ġarg ument", "bash rc", "Ġcontrol s", "ĠInstall Util", "Install Util", "ĠSys internals", "Ġpo ssi", "Ġdef ense", "Ġgener ated", "Ġev asion", "Ġapplication s", "ĠAl ternative", "ĠPriv ile", "ĠComp ile", "ĠKerbero asting", "Ġtri es", "orma lly", "AD Computer", "pr ereq", "Ġaction s", "ĠBo okmark", "ĠAuto Run", "ution s", "ĠCent OS", "36 5", "LO CAL", "pa ign", "ĠCl ass", "Ġgu ess", "ĠVBS cript", "ĠModif ies", "Ġtw o", "ĠPr incipal", "Ġred irection", "Ġpers istance", "ĠAr bitrary", "ĠCr owdst", "Ġlook ed", "ĠVirtual ization", "Ġtcp dump", "Ġsav es", "Ġdes igned", "ĠSaf ari", "ĠEvery one", "Ġconn ected", "ĠConfig uration", "Ġdecod ing", "Ġproduct s", "RA W", "ynam ic", "Ġdest ination", "ĠSIG INT", "ĠCan ary", "ĠESX CLI", "ĠMail box", "Encoded Command", "Ġfamil ies", "HIN E", "MAC HINE", "NAM E", "power off", "Ġsay ing", "Ġcam paign", "mast er", "Ġrand om", "Ġthres hold", "Ġchann el", "ĠCrowdst rike", "! \"", "% )", "6 00", "8 6", "> .", "A n", "A pplication", "A udit", "B e", "B y", "C at", "D o", "D ec", "D AT", "I t", "L S", "L aunch", "M ethod", "M SI", "M imikatz", "N O", "N ew", "O ver", "O nce", "P G", "P o", "P er", "P ar", "R em", "R OR", "S U", "T Y", "T ask", "W or", "a ut", "a pp", "b u", "b at", "b olic", "c apture", "d s", "e e", "e g", "e le", "f iles", "f older", "f ind", "f etch", "g round", "h o", "h ark", "i ence", "i brary", "l inux", "l per", "l test", "l tra", "m m", "m s", "o bs", "p n", "p ed", "p end", "p ath", "q li", "r af", "s c", "s ed", "s et", "s ys", "s ystem", "t ype", "w ith", "Ġ 64", "Ġ âĢ", "Ġt ermin", "Ġt urn", "Ġt ickets", "Ġa ffect", "er ous", "on ing", "he ther", "he lper", "Ġs ti", "Ġs il", "Ġs ize", "Ġs we", "re p", "is or", "is ted", "is ual", "ti fy", "or s", "le d", "Ġf ail", "Ġf ramework", "Ġw ord", "Ġw hether", "Ġp ause", "it ing", "us es", "Ġd riv", "Ġd ang", "Ġb l", "Ġb ot", "Ġb rows", "Ġb rowser", "ma p", "ic tim", "Ġin v", "Ġin ternet", "Ġex ch", "Ġex tra", "as cript", "ĠA udit", "ĠA MSI", "et ails", "ĠS ta", "ĠS tri", "ĠS AM", "ĠS cheduled", "ĠC LI", "ĠT erminal", "ĠP ath", "ĠD etails", "Ġv bs", "Ġv ss", "Ġv ictim", "an is", "an ted", "Ġn ltest", "Ġre port", "Ġre ference", "Ġ- -", "Ġma t", "Ġma ke", "Ġm in", "Ġm ech", "Ġm ovement", "Ġ( %", "Ġ( .", "Ġ( `", "Ġr m", "Ġr ange", "ĠR est", "ĠR ules", "ĠR ubeus", "ver t", "ver al", "ia lly", "Ġth ose", "ent utl", "am i", "Ġtest s", "co s", "pl ace", "ĠM ode", "ĠM ach", "ĠM ovement", "Ġsu pp", "ĠI mp", "Ġl isted", "ĠL ater", "qu ent", "ce pt", "Ġpro ject", "Ġpro tocol", "Ġh av", "ĠF ull", "ĠF ilter", "Ġor ig", "erv isor", "ĠEx ample", "ĠEx tract", "Ġcre ating", "Ġde tect", "ĠH ashes", "Ġg ather", "Ġst ating", "Ġst atus", "Ġst ores", "id er", "id ump", "of ing", "ĠB ackup", "ĠV alue", "ĠIn form", "Ġsp ace", "Ġsp ray", "ten t", "Ġsh adow", "Ġsh ares", "ĠW eb", "ĠRe g", "Ġch aracter", "ĠDe tection", "ĠDe tected", "Ġfiles ystem", "per ience", "Ġse veral", "Ex plorer", "Ġinstall ing", "Ġshell s", "our ces", "se quent", "fa ct", "Ġsim ulating", "log out", "ĠSh ortcut", "ĠPro vid", "ĠCon nection", "el net", "ĠEn able", "Ġopen ing", "Ġadd ition", "Pro gram", "Ġun lock", "Ġun install", "Ġun link", "Ġal read", "yp ervisor", "Ġca use", "ĠMod ules", "En vironment", "ĠSt ub", "Ġval ues", "Ġrequ ire", "Re ad", "Re quires", "Re boot", "Re gsvr", "Re quest", "ĠĠ Ġ", "Ġres ources", "Ġtime out", "00 4", "Ġ1 9", "Ġ1 27", "Ġcheck s", "Ġenvironment s", "Ġpr ereq", "Ġpr esent", "Ġover writes", "Ġtar ge", "Ġtar ball", "Ġman ip", "Ġview ed", "uil d", "tiv ities", "Ġso cket", "Ġspawn s", "ĠHK CU", "ĠCreate Process", "Ġaut hor", "Ġaut hentication", "Ġcall s", "ĠAccount s", "Ġload ing", "Ġpath s", "Ġmodif ies", "Ġes entutl", "ĠAut hentication", "Ġj ob", "Ġutiliz ed", "Ġsta te", "ĠAdvers ary", "Ġperform s", "bal t", "ĠSet UID", "ĠTh rough", "Ġ3 0", "ĠRun Once", "Ġneed ed", "Ġcer tain", "Ġback up", "Ġback do", "ĠRed line", "ĠMan agement", "li b", "de fault", "Ġim p", "Ġapp end", "Ġactor s", "ĠSc reen", "Ġversion s", "ĠInstall ation", "Ġ20 21", "Ġendpoint when", "Ġoper ating", "ĠAP T", "ĠSp ec", "Ġprogram s", "Ġev ade", "Ġent ries", "Ġretri ev", "Ġretri eved", "Ġerror s", "ĠPriv ate", "âĢ Ŀ", "Log ging", "Ġautom ated", "Ġflag s", "pr ay", "ecre t", "Ġlater al", "Ġproper ties", "Ġkn ow", "con f", "ĠDo H", "ĠMethod s", "App end", "ls ass", "Ġconnection s", "AdmPwd Exp", "Ġste ganograph", "ĠModif ication", "pec ially", "Ġdirect ly", "ĠEX E", "ĠRoot kit", "Ġautomatic ally", "pre load", "Ġbec ause", "ĠColl ection", "ĠDen y", "Ġlisten ing", "ĠGu est", "ĠOper a", "Co balt", "Mal icious", "mi Object", "ubl ic", "Ġcorre late", "Ġbat ch", "ĠCalc ulator", "Ġret urn", "ĠEd ge", "iration Time", "Ġcap ability", "Register Server", "Mac OS", "ijack ing", "Ġpurpo ses", "enta tion", "Ġadvan tage", "Ġassoci ated", "Ġrout ing", "erequis ites", "Ġunde tected", "DAT A", "Over write", "Par amet", "qli te", "Ġsil ver", "Ġswe ep", "Ġdriv es", "Ġdang erous", "Ġexch ange", "ĠStri ke", "Ġvss admin", "Ġmech anis", "ĠLater al", "Ġhav ing", "Ġorig inal", "ĠInform ed", "ĠProvid er", "Ġalread y", "ĠStub Path", "AdmPwdExp irationTime", "Ġsteganograph y", "\" ),", "' ,", ") -", "* \"", "/ .", "2 0", "2 2", "3 8", "3 9", "5 9", "7 6", "8 21", "A F", "A l", "B inary", "B rute", "B rowser", "C C", "C l", "C heck", "C MD", "D L", "D ownload", "D ON", "F A", "F older", "G ID", "G lobal", "G PP", "H ost", "H idden", "H istory", "H PowerShell", "H andler", "I mp", "J ob", "L D", "L Y", "M p", "M shta", "N K", "O n", "O ffice", "P E", "P T", "P l", "P riv", "P olicy", "P ersistent", "P arent", "P RO", "P DATA", "Q L", "R I", "R o", "R AP", "R DP", "R undll", "R OM", "R DON", "S L", "S SH", "S AT", "S nake", "S QL", "T S", "T un", "T ext", "T RL", "U T", "U p", "U buntu", "W ill", "Z ip", "` `", "a x", "a ction", "a ptures", "a ible", "a iled", "b i", "b t", "b ang", "b inary", "b ased", "b utions", "c er", "c re", "c ro", "d d", "d is", "d ec", "d at", "e per", "f low", "g n", "g ent", "i um", "i ases", "j ust", "k er", "k ing", "k flow", "l imited", "m ut", "n u", "n otepad", "o ice", "p ol", "p wn", "p owershell", "p wd", "r m", "r ror", "s k", "s ec", "s hell", "s ent", "s po", "s look", "t ask", "t ty", "u ff", "v is", "v bs", "w indow", "w ho", "y er", "y katz", "Ġ [", "Ġ ed", "Ġ ign", "Ġ etc", "Ġ ide", "Ġt xt", "Ġt ty", "Ġt amper", "Ġt elnet", "in ts", "in der", "in formation", "Ġa ble", "on ce", "he bang", "Ġs ign", "Ġs ave", "Ġs ecure", "Ġs ecret", "re nd", "re ak", "te gr", "is e", "ti ce", "ti ckets", "or ing", "or ies", "or table", "or Admin", "le ase", "le Ass", "Ġf ut", "Ġf inal", "Ġf ailed", "Ġw ere", "Ġw indow", "ex ploitation", "Ġp am", "Ġp op", "Ġp ull", "Ġp ython", "Ġp arent", "us ing", "us ed", "Ġd s", "Ġd ist", "Ġd ia", "en u", "Ġb et", "Ġb its", "Ġb reak", "ma n", "ma ri", "Ġus age", "ro ot", "Ġin voke", "Ġin tent", "Ġex cel", "ar ge", "Ġo cc", "lo od", "ĠA F", "ĠA SR", "et ri", "ĠS up", "ĠS chedule", "ĠS PN", "ĠS hebang", "al s", "al No", "al aible", "ĠC all", "ĠC ore", "ĠC urrent", "ĠC ron", "ĠC ertificate", "ĠC aptures", "ĠT im", "ĠT RAP", "ut s", "ĠP ROM", "ĠD D", "ta ct", "ul ated", "an y", "an ning", "an si", "Ġn ext", "Ġn ix", "od helper", "Ġre al", "est omp", "ri ver", "ri butions", "Ġma cro", "ĠE TW", "il y", "il er", "ĠR SAT", "ol den", "ver ify", "pon se", "pl ays", "ĠM imikatz", "ĠM enu", "Ġsu bs", "ĠI SO", "ĠI tems", "ĠI TS", "ct ure", "Ġl inux", "Ġl ink", "ce ed", "Ġcon troll", "Ġcon duct", "Ġcon text", "Ġcon stru", "Ġcon tact", "Ġpro of", "Ġpro ceed", "ch own", "ch mod", "ch ive", "Ġh int", "Ġh ive", "Ġuser init", "ĠF olders", "Ġad find", "em ber", "Ġdis plays", "ĠEx perience", "ke eper", "Ġ\" `", "Ġde tected", "st at", "ĠPower CLI", "denti f", "ĠH ijacking", "sta te", "ity Sup", "ĠG nu", "Ġg ets", "Ġg iv", "cal c", "Ġac tivities", "ĠB ase", "ĠB ind", "ĠB inary", "ĠB PF", "ĠDis play", "che ck", "for ced", "Ġcan not", "ĠCre ating", "ĠV ersion", "ĠV isual", "Ġdomain information", "ĠN O", "ĠN ame", "ĠN ormally", "ĠIn s", "ĠIn ter", "ĠIn put", "ĠIn formation", "ĠIn fo", "ĠIn ternet", "ĠIn Tun", "ĠO nce", "ĠO LE", "Ġsh uts", "ĠThe y", "ou ble", "ĠW or", "ĠW ill", "ĠW ires", "ĠRe gsvr", "ĠRe ader", "Ġch oice", "ĠDe fault", "ĠDe ploy", "tro kes", "ple m", "aun ches", "ac y", "ac ing", "ac tivate", "ac oning", "Ġro les", "ok en", "Ġtim er", "bs erver", "log off", "log ger", "ĠSh ow", "ĠPro cDump", "Ġhost s", "Ġhost name", "In ternet", "Ġopen s", "Ġun common", "Ġun register", "Ġal ter", "ĠCh aracter", "Ġca ke", "Ġoutput ting", "ress ed", "Ġkey logger", "Ġk ill", "Ġk erb", "Ġtr ansi", "Ġpriv esc", "ru pt", "ĠSt omp", "ĠSt uff", "ev t", "ard ing", "Lo ad", "Ġsc ans", "filtr ate", "Ġle ng", "De tection", "Ġ1 1", "Ġdele tion", "Ġfollow ed", "ff ic", "ero s", "Ġcheck ing", "AP PDATA", "Ġtask list", "Ġab use", "View er", "rit ory", "ĠCommand Process", "Ġman y", "Ġman agement", "Domain User", "ĠJ ob", "Ġview er", "Ġno tification", "Ġsession s", "Ġmess ages", "Con troller", "Con nect", "Sh utdown", "Ġpayload s", "tic ular", "Ġli e", "Ġprovid es", "Ġinter est", "Ġinter ested", "Ġinter rupt", "Ġdisable d", "Ġpar ticular", "Ġpack age", "Ġloc ated", "Ġbuil d", "ĠAtomic Test", "ĠSet GID", "ĠQ UI", "AT HPowerShell", "WMI Object", "admin ctl", "Ġevent s", "IN ET", "Ġinclud es", "ĠHIST IG", "ĠHIST SIZE", "Ġchang ing", "ĠChrom ium", "10 59", "Command Line", "li ke", "Ġsys adminctl", "ĠRo le", "Ġlogin window", "havi orAdmin", "Ġim plem", "ĠRes ponse", "11 19", "ak es", "Ġdri ve", "Ġdri vers", "Ġshare d", "Ġdatab ases", "ĠKerb rute", "Ġcompress ed", "Ch ild", "ĠRem Com", "Ġgener al", "Ġgener ate", "Ġparamet ers", "Ġav alaible", "Ġaudit d", "ĠCom mon", "ĠCom mun", "Ġbehavi our", "Ġdoes n", "Comp iler", "ĠPriv acy", "ĠIP v", "abil ities", "âĢ Ļ", "Ġblock ed", "ĠComp ressed", "ĠEvent s", "Ġass igned", "HK CU", "Ġpass ed", "ĠTask s", "Ġreg arding", "Ġallow ing", "ĠScan ning", "Tr ust", "Tr ap", "ĠX SL", "Ġextension s", "ĠNo tify", "Ġconfirm ing", "ĠĠĠĠ ĠĠĠĠ", "ĠHISTFILE SIZE", "Ġavail ability", "con cept", "command s", "ft p", "ĠAll ow", "Ġstarted The", "Ġsear ch", "Ġsear ching", "Ġaddress es", "Ġvulner ability", "15 4", "Ġpri mari", "Ġexp ected", "ĠImage Path", "ĠOpen s", "Ġtrunc ates", "Ġcompromis e", "Ġplac es", "ook ies", "Ġste al", "ĠVM s", "Ġsend ing", "sel ves", "Ġtw ice", "Ġcr af", "Ġexfiltr ate", "ĠView er", "ĠLoad s", "Ġobfusc ation", "Prompt Be", "Ġpat ches", "ĠEX IT", "ĠEv asion", "Ġhigh ly", "Compress ing", "Aut om", "bpf N", "Ġter ritory", "ĠGr aph", "ĠManip ulate", "ĠManip ulation", "USER PRO", "Ca che", "HIST FILE", "met ric", "Ġpotenti al", "ĠSpo ofing", "ĠDll RegisterServer", "Ġmar ks", "ĠRecon naissance", "Ġdeploy ment", "ĠGener al", "ĠContain er", "Ġtrans fer", "Pre ference", "comp ress", "Ġvault cmd", "Ġcombin ation", "Ġremo v", "chedul er", "DomainG roup", "Ġpossi ble", "ĠPrivile ged", "NO RE", "Per mission", "Rem ove", "Wor kflow", "eg alNo", "Ġbot h", "Ġbrows ers", "ĠSta ndard", "ĠMach ine", "Ġaddition al", "Program s", "Ġbackdo or", "Ġimp erson", "Paramet er", "Ġmechanis m", "Al ternate", "DL P", "Mp Preference", "RDON LY", "mut able", "sent PromptBe", "spo ol", "slook up", "vis udo", "Ġide a", "tegr ity", "leAss ignment", "Ġfut ure", "Ġdist ributions", "Ġdia log", "ĠCron Job", "ĠPROM PT", "Ġsubs cription", "Ġconstru ctor", "itySup ported", "ĠGnu PG", "Ġgiv en", "ĠInTun e", "ĠWires hark", "Ġuncommon ly", "Ġkerb eros", "Ġtransi ent", "ĠStomp s", "ĠStuff ing", "Ġleng th", "ĠCommandProcess or", "ĠQUI C", "ATHPowerShell CommandLine", "ĠHISTIG NORE", "Child Item", "ĠCommun itySupported", "Ġprimari ly", "USERPRO FILE", "egalNo tice", "sentPromptBe haviorAdmin", "ATHPowerShellCommandLine Parameter", "# {", "( -", ", ,", "/ $", "2 8", "5 6", "7 0", "9 9", ": $", "A S", "A DS", "B o", "B asic", "B uild", "C D", "C I", "C ode", "C AP", "C ON", "C raf", "C ookies", "D O", "D Q", "D R", "D ut", "D ynamic", "E S", "F S", "F ilter", "G T", "G o", "G op", "H ar", "H el", "I F", "I O", "K e", "L AM", "M E", "M S", "M e", "M in", "M ap", "M ake", "N U", "N ame", "P his", "P ass", "P SI", "P RE", "R est", "R ule", "S E", "S te", "S im", "S ession", "S ync", "S tage", "S pray", "T h", "T or", "T emp", "T CP", "T RO", "T TY", "U H", "V NC", "V CI", "W h", "W rite", "W OR", "X LL", "X Certificate", "\\ <", "_ .", "_ *.", "a ccess", "a Script", "a cos", "a ffic", "b e", "b il", "b ack", "b ase", "b rute", "b admin", "c A", "c le", "c pl", "c ated", "c ase", "c ard", "c ument", "c ale", "c orre", "d b", "d ata", "e f", "e en", "f x", "f ul", "g in", "g ation", "i o", "i er", "i od", "i ted", "i vid", "j ected", "l a", "l n", "l bin", "m l", "m x", "m em", "m st", "n o", "n p", "n one", "o ted", "o ves", "p e", "p x", "p ing", "p rompt", "r v", "r as", "s on", "s ide", "s rc", "s Folder", "t le", "t inu", "t ds", "u a", "u k", "u pl", "u id", "u gg", "u fact", "u cture", "u TTY", "v in", "w eb", "w anted", "w miObject", "x ls", "x ml", "y y", "y le", "y Desk", "y cle", "y uk", "~ /.", "Ġ Z", "Ġ ~/.", "Ġt it", "Ġt ail", "Ġt ele", "in i", "Ġa ct", "Ġa round", "Ġa pplied", "er t", "er ts", "on s", "on ts", "on ym", "es hell", "es cription", "Ġs ch", "Ġs ecrets", "Ġs qlite", "re g", "re q", "is ta", "is hed", "Ġc o", "Ġc ase", "or ted", "Ġf o", "Ġf ru", "Ġw on", "Ġw badmin", "nd ll", "nd irect", "Ġto p", "Ġto co", "ex ist", "ex plorer", "Ġp ow", "Ġp age", "Ġp oll", "Ġp olicies", "Ġp ublic", "Ġp fx", "us ual", "Ġd d", "Ġd ue", "Ġd ub", "Ġd one", "Ġd squer", "Ġd aemon", "Ġd rop", "Ġd otnet", "Ġd upl", "en ari", "ow ever", "Ġb u", "Ġb est", "ma ll", "ed er", "at est", "at omic", "ro l", "ro ss", "ro yer", "Ġin t", "Ġin ac", "Ġin ternal", "Ġin jection", "Ġin stru", "Ġin jected", "Ġex ection", "Ġex plo", "Ġex ploit", "Ġex por", "Ġex clusion", "ar g", "ar ting", "ar ball", "ar ily", "Ġo ptions", "lo b", "lo ud", "ĠA s", "ĠA TP", "et Cache", "un ted", "un ks", "ĠS ide", "ĠS ensitive", "ĠS igned", "ĠS ecrets", "ĠS tit", "ĠS ervices", "ĠS een", "ess age", "ĠC er", "ĠC url", "ĠC ustom", "ĠC loud", "Ġexecu tor", "ĠT or", "ĠT ime", "ĠT CP", "ĠT oken", "ĠT GT", "ĠP l", "ĠP owers", "ĠP ortable", "ĠP CAP", "ĠP uTTY", "ĠD S", "ĠD ec", "ĠD est", "ĠD IS", "ĠD aemon", "ĠD river", "ta ke", "Ġv pn", "ate keeper", "Ġn c", "Ġn ode", "Ġn slookup", "Ġn tds", "Ġre ce", "Ġre covery", "Ġre ach", "Ġre ading", "Ġre view", "ĠU ltra", "ad s", "ad ows", "Win RM", "Ġfile and", "Ġma kes", "ĠE lev", "ĠE rror", "ĠE px", "Ġm o", "Ġm is", "Ġm icro", "Ġm onitor", "Ġon ion", "Ġlo op", "Ġlo ts", "Ġlo lbin", "Ġr c", "ĠR ecur", "ĠR PC", "ĠR yuk", "ol ution", "Ġfor est", "ass es", "ur er", "um entation", "am ing", "ĠWin RM", "Ġtest ing", "co pe", "pl ist", "ĠM ake", "ĠM asquerading", "ĠM acos", "ĠM cA", "Ġsu ccess", "Ġsu pplied", "ĠI AM", "Ġl ow", "Ġl atest", "ĠL ink", "ĠL ibrary", "ĠL NK", "ĠL aunches", "qu ence", "qu ired", "ve lo", "ain text", "Ġh ide", "Ġby te", "ĠF lags", "ĠF ax", "ĠF onts", "ry pted", "Ġdis ables", "Ġdis card", "ir d", "ay er", "ĠEx it", "ĠEx ternal", "ĠEx tension", "ke ep", "Ġ\" %", "Ġde pend", "Ġde velo", "ĠPower Po", "denti ty", "Ġlog out", "sta tion", "are d", "ĠG A", "ĠG o", "ĠG CP", "ĠG atekeeper", "Ġg zip", "Ġg pg", "Ġg rep", "gist ration", "Shell Startup", "ction s", "Ġen c", "Ġen gine", "Ġen abling", "ĠUs age", "ly mp", "Ġu fw", "ata log", "Ġe ver", "Ġe ff", "Ġac ross", "ĠB e", "ĠB ut", "ip her", "ĠCre ation", "ĠV SS", "ĠV irus", "Ġdomain s", "ĠN et", "ĠN ames", "ĠN Sudo", "ĠIn tegrity", "ĠO r", "ĠO ptions", "ĠO lymp", "Ġsh red", "ĠThe n", "ĠExecu ting", "ou gh", "ĠW rite", "ĠRe porting", "ĠRe place", "ĠRe gistration", "ĠDe bi", "tr ucture", "per ation", "Ġse le", "Ġse quence", "ĠLo ck", "ĠLo ckBit", "bl ue", "Ġy ear", "Ex port", "Ex ample", "Ex clusion", "OS T", "ĠAn ti", "ac ted", "ang ing", "sh rc", "sh red", "ĠCon sole", "ĠCon sentPromptBehaviorAdmin", "ĠCon rol", "Ġper iod", "ĠEn cry", "ag ne", "Ġwe bserver", "Ġun it", "Ġun at", "Ġun load", "Ġun set", "Ġaccess ing", "Ġaccess ed", "ue keep", "ind ex", "Cre ating", "ST P", "Ġca uses", "ust Desk", "vir us", "ĠMod ified", "Ġk ext", "Ġtr affic", "En forced", "bo ok", "ern ame", "ru ndll", "ail able", "ard ware", "ard Dut", "Lo ading", "Ġwin pwn", "ĠGet Object", "Ġsc anning", "gr ade", "Re g", "av aScript", "Ġfoll ows", "Ġem ulates", "Ġpre fetch", "Ġcurrent ly", "00 5", "00 00", "Ġdele ting", "Ġtask host", "fer en", "Ġcalc ulator", "Ġpr erequisites", "Ġbo okmark", "ans fer", "Ġdump s", "Ġdump ing", "Ġman age", "Ġman ager", "ĠJ avaScript", "ĠUtil ity", "Ġver y", "pro tocol", "ĠData base", "ĠUser init", "AM SI", "clud ing", "Con nection", "Sh ow", "Ġaut h", "Ġaut hentic", "Ġcall ing", "Ġprovid er", "Ġlaunch ing", "Ġpip ing", "Ġup load", "Ġinter act", "Ġpar ts", "Ġpack et", "Ġdec re", "Ġdec rypt", "Ġdec rypted", "ĠSet up", "ensi ve", "ĠRun s", "url ca", "Ġprevent s", "FILE NAME", "IN etCache", "Ġtyp es", "Ġfind s", "Ġback ground", "10 27", "li ent", "ĠUn wanted", "ĠUn usual", "ĠWMI C", "ĠProcess es", "Ġembedd ing", "Ġim port", "ĠRes ource", "To Atomic", "To Ass", "ak bot", "ak ness", "Ġthem selves", "Ġclear s", "Ġclear text", "Ġlock ing", "Ġencry ption", "Ġcompress ion", "Ġ20 22", "Run ning", "sv chost", "Ġpo inter", "Ġoper ator", "Ġoper ations", "ĠSp ray", "Ġrest ore", "Ġrest arted", "ĠRem oves", "Ġgener ally", "Ġev en", "Ġev ading", "Ġkeys trokes", "Ġtimestamp s", "Ġaudit pol", "ĠCom puters", "ĠList Pl", "ĠBlack Cat", "ĠAttempt s", "ĠAttempt ing", "Ġwork station", "ĠAl so", "Sharp Hound", "Ġquery ing", "Atomic Service", "Atomic Test", "AN G", "Ġblock s", "unc ate", "Ġstring s", "Ġunder take", "Ġpass es", "Ġinf ras", "Ġreg ular", "ĠMal icious", "Mod ule", "Password Spray", "Tr ail", "ĠX ML", "ĠApp end", "Ġproper ly", "ĠNo tification", "Ġconfirm s", "ER ROR", "con fig", "ym bolic", "ĠDo cker", "ĠDo cument", "Ġelev ation", "Ġsear ched", "Ġlever ages", "Ġappear ance", "36 0", "App Data", "LO AD", "ctive ly", "hor ized", "ĠPayload s", "Ġmail box", "ĠStop s", "Ġtempor arily", "ook s", "ĠCl ipboard", "Ġmasquer ading", "Ġgu est", "Ġsend s", "Ġobtain ed", "Ġupd ate", "Open ed", "Ġexfiltr ated", "Ġexfiltr ating", "ĠPr int", "Ġred irect", "otenti ally", "ĠHel per", "Ġcompile d", "Ġobfusc ate", "Ġobfusc ated", "55 35", "Pr int", "Ġ= >", "Ġcron d", "Ġpat ched", "Ġdirect ories", "ĠEv ade", "Ġens ures", "ĠOn ly", "AR I", "All ow", "Aut hor", "PF XCertificate", "Web Global", "view er", "Ġbec ome", "Ġind ivid", "ĠColl ect", "ĠDen ied", "Ġcons ider", "str umentation", "ĠGu ardDut", "ĠOper ation", "ĠSharp Hound", "Ġspool er", "16 8", "Ca ution", "Cim Method", "met ry", "nn nn", "Ġsw ap", "Ġsw itch", "Ġpower SQL", "Ġpotenti ally", "ĠSpo ol", "ĠSession Gop", "ĠTr ansfer", "Ġme ans", "Ġanti virus", "ĠGener ic", "12 3", "44 4", "50 5", "Event Log", "PU A", "Sc reen", "ph one", "tor age", "ward s", "Ġden ied", "Ġden ial", "Ġben ign", "Ġexclud e", "Ġexclud ed", "ĠEs pecially", "Ġhand led", "Provid ers", "Ġrecon naissance", "ĠAutom ation", "Ġguess es", "Ġguess ing", "Dec ode", "SU DO", "app ing", "bu g", "mm yy", "ĠâĢ ľ", "Ġsti ll", "Ġbl uekeep", "Ġextra ction", "Ġmat ching", "ĠRest ore", "Ġsupp orted", "ĠConnection s", "Ġ19 70", "Ġtarge ted", "Ġauthor s", "ĠScreen Connect", "Browser Pass", "Cl asses", "Priv ile", "sec dump", "task s", "Ġign ore", "Ġtamper ing", "Ġds cl", "Ġbits admin", "Ġocc ur", "lood Hound", "ĠSup port", "ĠSPN s", "ĠTim estomp", "verify ctl", "Ġcontroll ers", "ĠInter face", "ĠWor ld", "Load able", "Ġimplem ented", "Autom ated", "Ġimperson ating", "Alternate ShellStartup", "Bo x", "CON TRO", "Craf ting", "Hel per", "Ke ys", "Me In", "PSI mage", "PRE LOAD", "Rest art", "brute force", "no log", "ufact urer", "vin ject", "Ġtail or", "Ġtele metry", "onym ous", "Ġsch tasks", "Ġtoco py", "exist ing", "Ġpow eshell", "Ġpoll ute", "Ġdub bed", "Ġdsquer y", "enari os", "Ġbest arted", "Ġinstru ctions", "Ġexplo ited", "Ġexpor ts", "ĠStit ch", "ĠTCP dump", "ĠDest royer", "ĠDIS M", "adows torage", "ĠElev ation", "ĠEpx plorer", "Ġmicro phone", "ĠRecur sively", "Ġdiscard ed", "ĠPowerPo int", "Ġeff ec", "ipher al", "ĠOlymp ic", "ĠDebi an", "ĠEncry pted", "Ġtaskhost w", "urlca che", "ToAtomic sFolder", "ToAss ist", "ĠListPl anting", "Ġinfras tructure", "WebGlobal Module", "Ġindivid ual", "ĠGuardDut y", "ĠSessionGop her", "BrowserPass View", "CONTRO L", "! `", "! ).", "! \".", "\" ).", "$ _.", "' .", ") :", "* *", "+ +", "/ *", "/ <", "/ {", "0 11", "0 50", "1 3", "1 7", "3 0", "3 1", "3 64", "3 40", "4 5", "5 45", "6 0", "6 5", "7 4", "8 0", "9 0", "9 8", "9 600", ": :", "> [", "> \\\\", "> /<", "? {", "A c", "A r", "A z", "A SH", "A nti", "A gent", "B ron", "B ased", "B lack", "B LD", "B CD", "B loodHound", "C H", "C ap", "C Sh", "C url", "C apture", "C leanup", "C TRL", "C lient", "D ev", "E O", "E W", "E Linux", "E SS", "F iles", "F inder", "G A", "G ON", "G UID", "H T", "H e", "H u", "H ook", "H VCI", "H owever", "I ds", "I dentif", "I ndirect", "J Script", "L a", "L ibrary", "L egalNotice", "L ANG", "M C", "M O", "M ic", "M ode", "M icro", "M ag", "M cs", "M ember", "M apping", "N F", "N in", "N ode", "N SI", "N ON", "O L", "O b", "O peration", "O GON", "P R", "P n", "P ad", "P ip", "P En", "P ersistence", "P ython", "P ubl", "P ublic", "P lease", "Q u", "Q uer", "R ed", "R ecur", "R RE", "R AND", "R ROR", "R etri", "S M", "S V", "S e", "S n", "S v", "S x", "S ta", "S end", "S ection", "S AM", "S ensitive", "S uccessf", "S mb", "S ecure", "S ervices", "S cope", "T R", "T url", "T eam", "T hing", "U A", "U P", "U DP", "U PX", "U RL", "U UID", "U ltra", "U RI", "V irus", "V ARI", "W ar", "W LL", "W ord", "W erFault", "W CM", "W miObject", "X LAM", "Y MO", "Y SV", "Z agne", "\\ .", "\\ `", "\\ ..", "_ <", "` \").", "a z", "a ti", "a ir", "a iting", "b f", "b on", "b ers", "b our", "b el", "b uil", "b de", "b ackup", "b uild", "c f", "c w", "c ing", "c an", "c ur", "c ent", "c ure", "c ord", "c ustom", "c mst", "d r", "d ia", "d ot", "d ir", "d cl", "d inal", "e vent", "e igh", "e ps", "e tit", "f d", "f ix", "f lags", "f ee", "f odhelper", "g t", "g z", "g ic", "g ro", "g id", "g roup", "g lobal", "g rep", "g lib", "g Ids", "h i", "h l", "h as", "h ta", "h unt", "h ome", "h ider", "h Rule", "i b", "i e", "i w", "i et", "i ate", "j a", "j script", "k ill", "k ub", "k url", "k Cleanup", "l ic", "l icious", "l ast", "m es", "m or", "m ed", "m end", "m icrosoft", "m util", "n ew", "n own", "n umer", "n el", "n ap", "o T", "o soft", "o very", "o bject", "o ined", "o cation", "o ca", "o Client", "p ar", "p id", "p ple", "p ired", "p urpo", "r f", "r ow", "r ules", "r bt", "s f", "s or", "s ke", "s sh", "s ize", "s ub", "s lock", "s admin", "s ensitive", "s bin", "s cp", "s uccessful", "s res", "s pec", "s ecrets", "s util", "s ascript", "s qlite", "s Hidden", "s ftp", "s ymbolic", "t z", "t his", "t req", "u ic", "u ction", "u ick", "v t", "v ing", "v en", "v ul", "v est", "v ious", "v ive", "v Publ", "w ine", "w ud", "w av", "w Bypass", "w ful", "w sf", "x im", "x wn", "x cl", "y our", "y lib", "y Turl", "z e", "z one", "} )", "Ġ {", "Ġ \\\"", "Ġ #{", "Ġ 90", "Ġ ?{", "Ġt un", "Ġt able", "Ġt ables", "Ġt eam", "Ġt ell", "Ġt rend", "Ġt akes", "in ce", "in ting", "in En", "in fo", "in sing", "in ite", "in yTurl", "Ġa id", "er ia", "er ify", "er ror", "on ly", "es tion", "Ġs ur", "Ġs ent", "Ġs ite", "Ġs mb", "Ġs chedul", "Ġs ftp", "Ġs mall", "Ġs dcl", "re ll", "re ach", "re boot", "re porting", "te x", "te al", "te am", "ti e", "ti al", "ti cal", "ti ty", "ti fact", "Ġc or", "Ġc ri", "Ġc ore", "Ġc ard", "Ġc rit", "Ġc password", "Ġc sc", "Ġc cmst", "or ation", "or age", "ll ection", "le ak", "le Object", "Ġf ill", "Ġf ac", "Ġf reebsd", "Ġf etch", "Ġf olders", "Ġf eder", "Ġf sutil", "Ġf inite", "Ġw ip", "Ġw ays", "Ġw aiting", "Ġw sres", "ec ess", "ec Edit", "om ration", "om mend", "ing Server", "ex cluding", "ex pired", "Ġp us", "Ġp em", "Ġp yp", "Ġp cw", "Ġp kill", "it tle", "it tie", "us r", "us ers", "us ted", "us ername", "Ġd ed", "Ġd ro", "Ġd ir", "Ġd esk", "Ġd emon", "Ġd ouble", "Ġd mes", "en c", "en ess", "en um", "en able", "en ame", "en cry", "en umeration", "en ses", "en ough", "Ġb z", "Ġb un", "Ġb lob", "ma king", "ma licious", "ic al", "ic ates", "ic ated", "ic ator", "ed it", "at o", "at ure", "at tr", "at form", "at trib", "at son", "Ġus ually", "ro leAssignment", "Ġin vo", "Ġin iti", "Ġin cre", "Ġin corre", "Ġin hi", "Ġex its", "ar ing", "ar ch", "ar ks", "ar ab", "ar ses", "ar bon", "Ġo ur", "Ġo ld", "Ġo dd", "Ġo sk", "Ġo sascript", "as ing", "lo cale", "ĠA ction", "ĠA vo", "ĠA void", "ĠA ES", "ĠA mmyy", "ĠA NON", "ĠA pple", "ĠA wful", "et ykatz", "ĠS w", "ĠS erv", "ĠS ig", "ĠS ID", "ĠS ub", "ĠS ingle", "ĠS Delete", "ĠS eat", "ĠS UID", "ĠS udo", "ĠS na", "ĠS ele", "ĠS cheduler", "ĠS ELinux", "ĠS YSV", "ĠS nap", "ĠS teal", "ĠS ecEdit", "al i", "al id", "al so", "al iases", "ess ages", "ĠC P", "ĠC b", "ĠC OM", "ĠC PU", "ĠC TRL", "ĠC atalog", "ĠC arbon", "Ġexecu tables", "ĠT op", "ĠT ou", "ĠT emp", "ĠT ake", "ĠT ermin", "ĠT TP", "ĠT LS", "ĠT TY", "ĠT rend", "ĠT arball", "ut or", "ĠP an", "ĠP ot", "ĠP up", "ĠP age", "ĠP UT", "ĠP DQ", "ĠP otentially", "ĠP arses", "ĠD B", "ĠD O", "ĠD ir", "ĠD irect", "ĠD cc", "ĠD otnet", "ĠD ouble", "ĠD escription", "ĠD arks", "ta b", "ta m", "ta ch", "ta bs", "ta ches", "ta ne", "his hing", "Ġv ect", "Ġv irus", "Ġv mx", "ul tane", "an ts", "Ġn ow", "Ġn ull", "Ġn ormally", "Ġn eigh", "Ġn gro", "Ġn ecess", "od ial", "Ġre co", "Ġre ve", "Ġre ally", "Ġre po", "Ġre name", "Ġre vert", "Ġre activate", "Ġre feren", "ĠU I", "ĠU p", "ĠU niqu", "ĠU DP", "ĠU mb", "ĠU RI", "ĠU SE", "Ġbe aconing", "Ġbe gin", "est Trust", "ad d", "ad le", "ad ers", "ad st", "ad ually", "ad less", "ri ff", "ri de", "Ġcom ing", "Ġcom admin", "Ġfile less", "Ġma cos", "Ġma king", "Ġma vinject", "Ġma gic", "Ġma xim", "hell o", "ĠE DR", "ĠE RROR", "il it", "il ity", "Ġm ost", "Ġm ove", "Ġm imi", "Ġm emb", "Ġm shta", "Ġm ember", "Ġon to", "Ġon line", "Ġlo st", "ck y", "Ġ( -", "Ġ( âĢ", "Ġr ansom", "Ġr ather", "Ġr dr", "exe Upon", "ĠR cl", "ĠR igh", "ĠR etri", "ĠR ustDesk", "ĠR BCD", "ĠR ename", "ol ang", "ol ves", "ia mor", "Ġfor files", "Ġfor cing", "if i", "if ice", "Ġth ing", "Ġth an", "Ġth ird", "Ġth row", "ur ning", "um ed", "ent ly", "rom e", "co ok", "co llection", "pon d", "pon ent", "pl ate", "pl ants", "ĠM ag", "ĠM ust", "ĠM orer", "ĠM SO", "ĠM imi", "ĠM FA", "ĠM ini", "ĠM essage", "ĠI tem", "ĠI CM", "ĠI ME", "ĠI dentity", "ĠI NF", "ĠI oT", "ĠI sHidden", "ct op", "Ġl im", "Ġl and", "Ġl ines", "Ġl imited", "Ġl arge", "ĠL ong", "ĠL eve", "ĠL ever", "ĠL arge", "ĠL egalNotice", "ĠL UH", "ĠL OGON", "ĠL SM", "ĠL ittle", "qu ality", "qu oted", "Ġcon ce", "Ġpro tected", "Ġpro ced", "Ġpro files", "Ġpro cf", "ve igh", "im ic", "im gr", "im mutable", "ch ain", "ch flags", "ch attr", "Ġh h", "Ġh ar", "Ġh ta", "Ġh ad", "Ġh id", "Ġh andler", "Ġh ypervisor", "Ġh inder", "ot es", "ot ing", "ot hold", "Ġuser enum", "ĠF TP", "ĠF eat", "ĠF ramework", "ĠF odhelper", "Ġad id", "em ent", "em plate", "up g", "Ġor gan", "ir ing", "ir ror", "Ġit m", "Ġat p", "erv als", "ĠEx tra", "ĠEx filtrate", "ke ys", "Ġrun ner", "Ġrun once", "Ġrun book", "Ġcre dit", "Ġ\" *\"", "Ġde pre", "st atus", "ĠPower Up", "Ġlog off", "ĠH e", "ĠH ome", "ĠH ide", "ĠH ello", "ĠH ypervisor", "ĠH ardware", "ĠH ooks", "sta nce", "all pa", "all ocation", "Ġsystem state", "op ied", "ĠG ath", "ĠG ID", "ĠG Zip", "ĠG olden", "ĠG secdump", "ĠG UP", "Ġg reat", "Ġg lobal", "Ġg cc", "Ġg olden", "Ġst arts", "Ġst arting", "Ġen umerates", "ĠUs oClient", "ly Con", "Ġsuccessful y", "ig ate", "ig est", "cal ation", "cal ua", "Ġe l", "Ġe as", "Ġac tivate", "Ġac cord", "ĠPowerShell Upon", "ĠB ASH", "ĠDis kCleanup", "Ġcan cel", "ĠCre ated", "ĠV B", "ĠV ar", "ĠV PN", "ĠV erify", "ĠN t", "ĠN amed", "ĠN ormal", "ĠN map", "ack map", "ĠIn iti", "ĠIn ject", "ĠIn her", "ĠIn box", "ĠIn jects", "ĠIn strumentation", "ĠIn veigh", "ĠO f", "ĠO ption", "ten z", "Ġsh ows", "Ġsh im", "Ġsh own", "Ġsh ort", "Ġsh arp", "Ġsh aring", "ĠThe se", "ĠExecu ted", "Ġutil is", "Ġprocess or", "Ġ/ /", "ĠW e", "ĠW IN", "ĠW evt", "ĠW oca", "ĠW atson", "ĠW ifi", "ĠRe ad", "ĠRe gister", "ĠRe boot", "ĠRe ference", "ĠRe fle", "ĠRe quest", "ĠRe quired", "Ġset uid", "Ġset gid", "Ġch cp", "Ġch unks", "ĠDe v", "ĠDe mand", "ĠDe tect", "ĠDe bu", "ĠDe pend", "Ġ` ..", "Ġscript let", "ĠLo ok", "ĠLo cation", "ud p", "ud Trail", "ple ted", "to re", "Ex it", "Ex tension", "Ex tra", "Ex filtrate", "Ġthen ew", "ĠK ill", "ĠK EY", "ĠK insing", "Ġout side", "ĠAn yDesk", "ĠAn onymous", "Ġdownload and", "riv esc", "se arch", "Ġfunction al", "ac es", "ac ls", "Ġro ute", "ect l", "The Thing", "ok i", "ok ing", "sh utdown", "Ġsim ulation", "Ġsim ulated", "Ġpowershell sensitive", "ĠSh im", "ĠSh ares", "ĠSh adowstorage", "ĠPro gram", "Ġcontain ed", "Ġspec ial", "Ġspec ifice", "ĠCon trib", "Ġhost Upon", "ĠEn abling", "ĠEn crypt", "In put", "In box", "In ternals", "In stance", "Ġwe akness", "Ġconf lic", "Pro tocol", "Pro cDump", "Pro gIds", "Ġun p", "Ġun able", "Ġun av", "Ġun less", "Ġun limited", "Ġun compress", "Ġun reach", "Ġal ternative", "Ġal iases", "Ġar chive", "Ġaccess ible", "Ġdo cker", "Ġi tem", "Ġattack ing", "ĠAdmin s", "Ġk mutil", "Ġk rbt", "Ġk xwn", "Ġk ittie", "Ġtr ad", "Ġtr ace", "En umeration", "En abling", "bo s", "ail y", "ev ing", "ev il", "ev tutil", "ick bot", "AC L", "Ġwin zip", "Ġwin rar", "Ġwin PE", "Ġattempt ing", "Ġconfig uring", "vid ed", "Ġsc p", "Ġsc enarios", "po ints", "Ad ap", "Re place", "Re activate", "av ascript", "Ġle ts", "Ġle ast", "Ġle ft", "De faults", "De bug", "Ġcl ang", "Ġpre fer", "Ġpre vious", "ap e", "ub Pr", "Ġres earch", "Ġadmin s", "Ġtime zone", "00 0", "00 3", "00 6", "ĠAD S", "ĠAzure AD", "ĠDLL s", "Ġdele gation", "do cker", "ff ler", "Ġmodify ing", "Ġ2 00", "Ġab ility", "Ġpr ctl", "Ġpr inter", "puter Defaults", "Ġroot kit", "Ġtar file", "Ġtar ger", "ĠCommand s", "Ġman aging", "Ġman ufacturer", "Ġshould n", "Domain Dump", "Domain Policy", "Domain Controller", "Domain Trust", "ĠJ S", "ĠJ script", "ĠJ obs", "tiv es", "tiv eness", "Ġver ified", "pro xy", "pro vided", "Ġprompt ing", "ĠData cent", "Ġspawn ed", ":\\ *\"", "Ġsee ing", "Process Exit", "clud e", "Con fig", "Sh ared", "bit ing", "Ġcreated ump", "ĠLog MeIn", "ord ump", "Ġrec ommend", "Ġli b", "txt to", "tif icates", "Ġpip es", "Ġob jects", "Ġes pecially", "Ġinter action", "ĠAut odial", "ĠDomain Controller", "ĠDomain PasswordSpray", "Ġj se", "Ġj obs", "Ġj oined", "Ġpar se", "Ġpack ages", "mar ker", "ĠDownload s", "Ġperform ed", "Ġconfiguration s", "BA SH", "ish ingServer", "Ġdec oded", "ĠTh ere", "ĠRemote PC", "net stat", "Ġ3 39", "Ġ3 000", "ĠQ akbot", "ĠQ uick", "ĠRun ning", "WMI C", "WMI Exec", "Ġpl ist", "Ġpl aintext", "Ġpl atform", "ĠTest ing", "Ġend points", "bedd ing", "Ġtyp ed", "Ġtyp ical", "Ġneed s", "Ġins mod", "Ġins ert", "Ġinclud ed", "Ġoff ice", "Ġnet stat", "ĠRed irection", "ĠShare Finder", "10 10", "10 55", "Ġsys internals", "Ġsys call", "ĠSim ilar", "ĠSim ulating", "ĠSim ultane", "ĠUn ion", "Ġls m", "Ġaccounts Upon", "ĠProcess ors", "uments Will", "St yle", "af e", "Ġim ported", "Ġim mutable", "Ġim med", "Ġim plants", "ĠRes ize", "Install able", "Ġkernel s", "11 36", "Get Current", "List er", "Remote Access", "To History", "ps exec", "Ġobs cure", "ĠSys V", "ĠSys Internals", "Ġlock out", "Ġshare enumeration", "Add itionally", "Ġtarget ted", "Ġendpoint Upon", "Ch own", "Ch mod", "Ch anging", "If Installable", "sv cs", "Ġip config", "lev ated", "ĠSp ace", "ĠPer l", "Ġren ew", "Ġren aming", "Ġrest art", "Ġrest oring", "Ġsub net", "Ġsub sequent", "Ġdef ensive", "Ġdef enses", "Ġscreen capture", "ploit s", "DS RM", "tim er", "tim es", "ĠCom pleted", "ĠCom puterDefaults", "Comp ile", "Comp iled", "Path ToAtomicsFolder", "ob fusc", "ĠPriv esc", "Local AppData", "ĠQuer ies", "AN T", "com m", "gg ers", "Ġ5 00", "Ġhe x", "Ġhe aders", "Ġexe uction", "ĠSearch Scope", "ĠComp ute", "ĠComp any", "ĠEvent log", "Ġforce fully", "Ġass ign", "Ġass ignment", "Ġsets pn", "ĠChang ing", "Log s", "Log in", "ĠLDAP Search", "ĠLDAP DomainDump", "Security Providers", "Ġtri ggers", "Ġpass ing", "Ġpass wd", "Ġpass hunt", "Ġinf l", "Ġinf omration", "Ġnum bers", "Ġms build", "Ġdiscover ing", "Ġdev ices", "ĠBypass es", "Ġwho se", "Ġwho ami", "ĠAttack s", "Com mon", "Password s", "Tr uncate", "ced ID", "ĠX LL", "Ġpart y", "Ġextract s", "ĠApp Data", "Ġvirtual ization", "Ġvirtual ized", "Ġproper ty", "Ġgo od", "fusc ated", "jec ting", "ĠAll TheThing", "Ġthere fore", "ĠDele tion", "Ġsear ches", "Ġlever age", "Ġempty ing", "process hider", "Ġvulner abilities", "15 64", "15 60", "15 74", "App vPubl", "Bit sadmin", "LO TR", "we en", "we ak", "Ġ4 6", "Ġ4 76", "Ġx wd", "Ġx wud", "Ġfeat ures", "Ġexp ire", "Ġexp ect", "Ġexp ired", "Ġexp iration", "ĠSM TP", "ĠEm bedding", "plic it", "ĠImage Mag", "ĠFire pwd", "ĠOver write", "ĠOver writes", "ĠOpen DNS", "ĠNTDS Util", "CU RRE", "cron tabs", "pa ir", "res pond", "Ġste ps", "Ġpost ing", "ĠCl ick", "ĠTeam viewer", "ĠPs Send", "Ġnumer ic", "Ġread s", "Ġgu id", "ĠWith out", "Admin istrator", "Ġescal ating", "Ġzip file", "Ġhel ps", "33 39", "Item s", "Open With", "Test ing", "domain info", "Ġcr ash", "Ġbin Path", "ĠAfter wards", "ĠLoad able", "Ġvari ant", "doc x", "Ġestabl ished", "55 505", "Pr erequisites", "kit tenz", "pd f", "Ġ* .", "Ġachi eve", "Ġcron tab", "Ġpers ist", "ĠAr chive", "ĠCr adle", "ĠCmd lets", "ĠEv il", "Ġlast log", "ĠGPO Audit", "ĠGPO RemoteAccess", "Ġens ure", "Ġens uring", "ĠOn line", "ĠEncoded Command", "Enable d", "Ġencrypt s", "ĠPermission s", "time out", "AL NU", "AR S", "Un install", "Un register", "Un limited", "Web Request", "van ced", "Ġqu iet", "Ġqu estion", "Ġqu otes", "Ġid le", "Ġter m", "Ġter ms", "Ġsav ed", "Ġps exec", "Ġind icate", "Ġind icator", "ĠSaf etykatz", "Ġregister ing", "Ġlisten er", "Ġconn ec", "Ġcons ent", "Ġcons umed", "str ates", "ĠHash cat", "ĠGr anting", "Exp ected", "soci ation", "ĠSharp up", "ĠSharp web", "ĠStream s", "Ġrequest ing", "ĠLogin Item", "Ġdecod es", "Ġspool sv", "Ġspool vul", "16 38", "40 600", "Co unt", "Cim Instance", "For estTrust", "HIST CONTROL", "PP AM", "Scheduled Task", "WD BLD", "WD igest", "With out", "]. <", "ns dump", "ns can", "ric ted", "run once", "Ġcorre ct", "Ġpower hell", "Ġdown grade", "ĠTr acing", "ĠDll Unregister", "Ġret urning", "Ġmar k", "ĠEd ition", "Ġme et", "Ġgr ant", "Ġgr anted", "Ġgr adually", "Ġstop ped", "Ġstop ping", "ĠVIB s", "ĠWerFault Sv", "Ġchmod s", "ĠContain ers", "Ġcap abilities", "Ġtrans acted", "Ġadministrator s", "proc dump", "Ġrecent ly", "Ġrecord ed", "ĠSpawn s", "Ġtrigger ing", "ĠBITS Admin", "ganograph ic", "CM STP", "Cron j", "EX TE", "NT LM", "NT FS", "Sup port", "cat To", "call ed", "ph ine", "sa ver", "zero es", "Ġ8 0", "Ġsuspicious ness", "Ġsym link", "Ġsym bolic", "Ġsym metric", "Ġclo sed", "Ġclo udTrail", "Ġpod s", "Ġben ef", "Ġbad pwd", "local host", "ĠSilent lyCon", "ĠPre ference", "erson ation", "Ġrepl ication", "Ġrepl acing", "ĠEs calation", "ĠRec ycle", "ĠRec overy", "ĠMS P", "ĠMonitor Process", "Ġhand les", "Ġremo ves", "Ġchown s", "DomainG PO", "ĠAutom ated", "Ġbuiltin s", "ĠSysinternals ProcDump", "Ġpossi bil", "ĠPrivile ge", "Audit ing", "Do cker", "Dec rypt", "LS pray", "Po tam", "SU CC", "aut h", "aut horized", "raf t", "sys call", "Ġtermin ate", "Ġtermin ates", "Ġsti cky", "Ġinv olves", "Ġinv oking", "Ġmin utes", "Ġmin idump", "ĠRest ricted", "ĠImp ort", "ĠImp ersonation", "ĠExtract ing", "Ġspray ing", "ĠWeb BrowserPassView", "ĠReg ular", "sequent ly", "Ġunlock ed", "Ġ19 2", "Ġmanip ulated", "Ġauthor ized", "Ġappend ing", "ĠSpec ify", "Ġretriev ing", "Ġretriev al", "âĢĿ .", "âĢĿ ).", "38 56", "Host name", "Imp ort", "Ro leAssignment", "`` `", "cer tutil", "dis able", "dec oded", "gn ized", "gn upg", "shell host", "who ami", "Ġed it", "Ġsign al", "Ġpop up", "Ġbet ter", "Ġbet ween", "man age", "ĠDD E", "Ġdetected by", "dentif ies", "check s", "ĠNO T", "ĠNO TE", "ĠIns tead", "ĠIns erts", "ĠShow UI", "evt x", "Ġdisabled in", "Ġgeneral domaininfo", "154 6", "154 7", "Ġsteal th", "Ġcraf t", "Ġcraf ts", "metric s", "ĠGeneral Recon", "compress ion", "Ġremov ed", "DomainGroup Member", "ĠMachine GUID", "DLP Agent", "spool sv", "Ġsubscription s", "28 3339", "Filter ed", "IF EO", "MS Build", "Min idump", "Phis hRule", "Ste ganographic", "Sim ulating", "Wh at", "WOR D", "be fore", "back ground", "ln k", "np rivesc", "tinu e", "ugg able", "ĠZ one", "Ġtit le", "Ġco vert", "Ġfo othold", "Ġfru it", "Ġtop ic", "Ġdrop per", "Ġdupl icate", "Ġbu ckets", "Ġint ervals", "Ġinac tive", "arg umentsWill", "ĠAs sociation", "ĠCer tain", "ĠPl ayer", "ĠPowers ploits", "ĠDec rypt", "Ġreach ing", "ĠUltra VNC", "Ġmo unted", "Ġmis sing", "Ġmonitor ing", "ĠMcA fee", "ĠExtension s", "ĠGo ToAssist", "Ġenc od", "ĠBe aconing", "ĠBut ter", "ĠNet sh", "ĠLock out", "OST AP", "Ġunat tend", "Ġkext load", "Ġauthentic ate", "ĠAppend s", "5535 40600", "Author ization", "Ġconsider ed", "ĠSpool er", "444 553540600", "Screen capture", "Privile ge", "nolog in", "Ġeffec tiveness", "!` \")", "545 2", "Ar g", "Az RoleAssignment", "Anti PhishRule", "Bron ze", "CH ARS", "Cap tion", "CSh adow", "EW M", "Identif ier", "La Zagne", "Mic osoft", "Nin ja", "NSI ON", "Ob fuscated", "Pn PEn", "Pip e", "Quer y", "Recur se", "RAND OM", "Retri eve", "Se Debug", "Sn itch", "Sx S", "Successf ully", "Smb Mapping", "VARI ANT", "War ning", "WCM Dump", "YMO US", "bel t", "buil t", "dia g", "dot m", "etit Potam", "global state", "glib c", "iw r", "iate ly", "kub ectl", "kurl sa", "numer ic", "purpo se", "ske l", "slock er", "spec ified", "uic y", "wine vt", "wBypass UAC", "xcl i", "Ġ?{ $_.", "Ġtun nel", "inEn um", "inyTurl a", "error reporting", "Ġsur vive", "Ġsmb status", "Ġschedul ing", "Ġsdcl t", "rell a", "Ġcor respond", "Ġcri tical", "Ġcrit eria", "Ġccmst p", "leak diag", "Ġfill s", "Ġfac ilit", "Ġfeder ated", "Ġwip er", "Ġwsres et", "Ġpus hed", "Ġpyp ykatz", "Ġpcw utl", "Ġded icated", "Ġdemon strates", "Ġdmes g", "encry ption", "Ġbun ch", "roleAssignment s", "Ġinvo cation", "Ġiniti al", "Ġincre ase", "Ġincorre ct", "Ġinhi biting", "ĠAvo slocker", "ĠANON YMOUS", "ĠAwful shred", "ĠSig ma", "ĠSeat belt", "ĠSna ffler", "ĠSele ct", "ĠSYSV OL", "ĠSnap MC", "ĠTop ic", "ĠTou ching", "ĠTrend Micro", "ĠPot ato", "ĠPup y", "ĠDir Lister", "ĠDcc wBypassUAC", "ĠDotnet search", "ĠDarks ide", "tach ment", "Ġvect ors", "Ġneigh bour", "Ġngro k", "Ġnecess ary", "Ġreco gnized", "Ġreve als", "Ġreferen ced", "ĠUniqu e", "ĠUmb rella", "Ġbegin s", "adst est", "riff on", "Ġmaxim um", "Ġmemb ers", "Ġ(âĢ ľ", "Ġrdr leakdiag", "ĠRcl one", "ĠRigh ts", "ĠRetri eving", "iamor phine", "cook ies", "collection to", "ĠMag ic", "ĠMorer econ", "ĠMSO LSpray", "ĠMimi k", "ĠMessage Box", "ĠICM P", "ĠIME WDBLD", "ctop us", "ĠLeve l", "ĠLever age", "ĠLUH N", "ĠLittle Snitch", "Ġproced ure", "Ġprocf s", "imgr ab", "ĠFeat ures", "Ġadid nsdump", "Ġorgan ization", "Ġ\"*\" }", "Ġdepre cated", "allpa per", "Ġsystemstate backup", "ĠGath ers", "Ġaccord ing", "ĠNamed Pipe", "ackmap exec", "ĠIniti ating", "ĠInher it", "Ġsharp view", "ĠWIN WORD", "ĠWevt Util", "ĠWoca o", "ĠRefle ctively", "ĠDebu gger", "ĠDepend ing", "Extra ction", "ĠContrib utor", "Ġconflic t", "Protocol Handler", "Ġunav ailable", "Ġunreach able", "Ġkrbt gt", "ĠwinPE AS", "Adap ted", "Ġprevious ly", "ubPr n", "Ġprinter check", "ĠDatacent er", "ĠAutodial DLL", "Ġ339 0", "ĠQuick time", "Ġplatform s", "ĠSimultane ous", "Ġimmed iately", "ToHistory Handler", "ĠAllTheThing s", "AppvPubl ishingServer", "Ġ476 9", "ĠImageMag ick", "CURRE NT", "ĠPsSend Keys", "OpenWith ProgIds", "55505 821", "ĠGPORemoteAccess Policy", "ALNU M", "Ġterms rv", "Ġspoolvul nscan", "1638 4", "ĠDllUnregister Server", "ĠWerFaultSv c", "EXTE NSION", "Ġbenef iting", "Ġbadpwd count", "ĠSilentlyCon tinue", "Ġpossibil ities", "SUCC ESS", "DLPAgent Service", "ĠMcAfee DLPAgentService", "PnPEn tity", "SeDebug Privilege", "errorreporting faults", "\" \"", "\" (", "# ).", "$ \"", "$ ..", "% ,", "' d", "( )", "( ).", "( ),", ") \"", ") '", ") /", ") `.", ") ):", "* '", ", \"", ". )", ". *", ". -", ". [", ". ).", ". ].", ". *.", ". **", ". \\`", "/ \"", "0 4", "0 6", "0 7", "0 40", "0 12", "1 80", "1 003", "2 6", "3 16", "6 35", "6 5535", "7 5", "7 76", "8 1", "8 2", "8 3", "8 8", "8 22", "8 76", "9 86", ": -", ": ~", ": :$", "= <", "= *'", "> \"", "> *", "> \\", "> /.", "> )'", "? \\\"", "@ {", "A b", "A ction", "A fter", "A li", "A UT", "A mmyy", "B E", "B R", "B in", "B ash", "B LI", "B last", "C L", "C er", "C ry", "C oll", "C AR", "C Sync", "D B", "D ll", "D et", "D ir", "D irectory", "D IN", "D esktop", "D aemon", "D river", "D escription", "D ylib", "D CShadow", "D iamorphine", "D CSync", "E m", "E y", "E nd", "E th", "E AD", "E mail", "E rror", "E DR", "E levated", "F ire", "F ull", "F lag", "F unc", "F lags", "F ax", "G S", "G r", "G u", "G ET", "G IT", "G CP", "G host", "G secdump", "G olang", "G riffon", "H o", "H ex", "H at", "H ub", "H ide", "H ive", "H OR", "H ypervisor", "H UH", "I E", "I P", "I R", "I s", "I nt", "I EM", "I mage", "I NS", "I ON", "I IO", "I dentity", "I cedID", "I CAR", "J avascript", "J uicy", "K S", "K s", "K it", "K ST", "K ext", "K erb", "L BA", "L IN", "L ight", "L SA", "L SASS", "L iv", "L sa", "L aunches", "L UA", "L ib", "L inEnum", "M A", "M N", "M P", "M b", "M o", "M an", "M emory", "M af", "M asquer", "M akes", "M essage", "M STP", "M irror", "N on", "N etc", "N eed", "N ames", "N ight", "N ix", "N ormal", "N imgrab", "N DIN", "O P", "O W", "O db", "O ctopus", "O BE", "O IIO", "O Kit", "P A", "P s", "P ow", "P at", "P ers", "P od", "P tr", "P ayload", "P SR", "P ortable", "P DQ", "P otentially", "P etitPotam", "P ubPrn", "Q LI", "Q akbot", "R T", "R ec", "R en", "R admin", "R ubeus", "R ustDesk", "R PR", "S P", "S o", "S p", "S er", "S en", "S tr", "S chedule", "S ets", "S ET", "S ource", "S UID", "S ecrets", "S ilent", "S ph", "S ee", "S cheduler", "S tore", "S ACL", "S afe", "T H", "T L", "T er", "T ri", "T em", "T ech", "T ree", "T ail", "T ake", "T icket", "T urn", "T erminal", "T shark", "T ries", "T ype", "T elnet", "T oken", "T inyTurla", "T GS", "T MP", "T OP", "T TL", "U N", "V B", "V E", "V M", "V BS", "V irtual", "V SS", "V IB", "V isual", "V alid", "W ARE", "W ER", "W rites", "W mi", "W mic", "W evtutil", "W OW", "X In", "X LM", "X OR", "Y es", "Y LD", "\\ `,", "\\ *.", "\\ #{", "` )", "` /", "a e", "a u", "a w", "a ma", "a pt", "a id", "a ure", "a pplication", "a Lo", "a mar", "a Cry", "b ro", "b ar", "b out", "b ust", "b tmp", "c r", "c um", "c count", "c table", "c ome", "c ab", "c url", "c used", "c asing", "c acls", "c ape", "c raft", "d am", "d ated", "d irectory", "d ps", "d aemon", "d ynamic", "d fd", "d aily", "e a", "e k", "e as", "e al", "e ly", "e ue", "e ged", "e levated", "f ing", "f ic", "f al", "f irewall", "f ron", "f olders", "f ven", "g a", "g w", "g re", "g or", "g it", "g ate", "g st", "g ated", "g ment", "g eth", "g oogle", "g ci", "g pg", "h r", "h at", "h ash", "h our", "h ich", "h ind", "h ere", "h and", "h ound", "h ant", "h ashes", "h ooks", "i y", "i est", "i bl", "i ks", "i ented", "i tems", "j f", "j s", "j or", "j ournal", "j pg", "j son", "k o", "k r", "k ed", "k temp", "k nown", "l ing", "l Create", "l anguage", "l ush", "l ista", "m e", "m n", "m u", "m w", "m y", "m ing", "m ip", "m log", "m ethod", "m emory", "m Service", "m its", "m enta", "m ugg", "m essages", "n l", "n on", "n ec", "n if", "n op", "n ig", "o in", "o is", "o Con", "o jack", "o It", "o ving", "o leObject", "o Ho", "o cum", "p i", "p his", "p ri", "p em", "p are", "p sh", "p ection", "p ected", "p arent", "p ng", "p ee", "p Ro", "p ua", "p peration", "p calua", "q jf", "r a", "r t", "r us", "r up", "r ag", "r aries", "r ans", "r ays", "s he", "s it", "s ur", "s im", "s age", "s eth", "s ru", "s ecurity", "s ession", "s af", "s sive", "s ilent", "s ues", "s ervices", "s db", "s Python", "s Section", "s tex", "t n", "t p", "t om", "t ar", "t ers", "t Win", "t ch", "t ry", "t ree", "t urn", "t arball", "t lCreate", "u pt", "u ation", "u able", "u ence", "u ching", "u rop", "u hl", "u ement", "v b", "v ed", "v il", "v ia", "v ok", "v cs", "v tutil", "v alue", "v mm", "v ailable", "v mw", "w o", "w z", "w as", "w ers", "w tmp", "w mi", "w ise", "w hich", "x ies", "x ordump", "y ou", "y pp", "y Qu", "z i", "} \"", "} .", "} `", "~ /", "« R", "à «R", "Ġ #", "Ġ )", "Ġ +", "Ġ \\", "Ġ _", "Ġ ic", "Ġ ess", "Ġ ill", "Ġ ir", "Ġ 00", "Ġ url", "Ġ Zip", "Ġ 99", "Ġ hello", "Ġ :~", "Ġ @{", "Ġ Yes", "Ġ }`", "Ġ ëR", "Ġt es", "Ġt ac", "Ġt mp", "Ġt ak", "Ġt ested", "Ġt emplate", "Ġt weak", "in s", "in ted", "in ten", "in ated", "in ally", "in ning", "in jection", "in cluding", "in oki", "in clude", "Ġa ware", "Ġa ud", "Ġa tack", "Ġa ppl", "Ġa bo", "Ġa mon", "Ġa gr", "Ġa pi", "er ce", "er ting", "on f", "on es", "on ed", "he m", "es et", "es ta", "es ia", "es cript", "es ented", "es entation", "Ġs ec", "Ġs om", "Ġs it", "Ġs ed", "Ġs ol", "Ġs pl", "Ġs ect", "Ġs ide", "Ġs ound", "Ġs ync", "Ġs usp", "Ġs ays", "Ġs hed", "Ġs cheduler", "Ġs olution", "Ġs cope", "Ġs ince", "Ġs afe", "Ġs nif", "re ed", "re gistry", "re vers", "re port", "re quires", "re cur", "te ll", "te ma", "te mand", "te ly", "te ull", "te ctable", "is k", "is o", "is tive", "is econd", "is hes", "Ġthe language", "Ġc d", "Ġc ar", "Ġc are", "Ġc ru", "Ġc lock", "Ġc lean", "Ġc rypt", "Ġc crypt", "Ġc atalog", "Ġc opied", "Ġc sru", "or ate", "or ites", "le nd", "le tion", "le op", "le tes", "le ared", "le git", "Ġf as", "Ġf our", "Ġf ully", "Ġf act", "Ġf ake", "Ġf eed", "Ġf ault", "Ġf ix", "Ġf alcon", "Ġf lush", "Ġf rus", "Ġf tp", "Ġf reed", "Ġw get", "Ġw ild", "Ġw allpaper", "Ġw mip", "ec raft", "ec ko", "nd point", "om atic", "om inated", "Ġto corre", "Ġto geth", "Ġto uching", "ex ecu", "ex ample", "ex plicit", "Ġp w", "Ġp an", "Ġp of", "Ġp ure", "Ġp her", "Ġp aging", "Ġp ix", "Ġp lease", "Ġp np", "Ġp ati", "Ġp air", "Ġp grep", "Ġp hishing", "Ġp calua", "Ġp hr", "it self", "it group", "it Hub", "it Image", "tion al", "tion ary", "us tro", "us pen", "Ġd b", "Ġd ic", "Ġd at", "Ġd ate", "Ġd um", "Ġd ire", "Ġd id", "Ġd ays", "Ġd ns", "Ġd ynam", "Ġd ynamic", "Ġd sed", "Ġd ylib", "Ġd aily", "en es", "en ables", "en code", "en abl", "en tial", "ow Run", "Ġb ro", "Ġb as", "Ġb ri", "Ġb log", "Ġb rit", "Ġb und", "Ġb asic", "Ġb lend", "ma re", "ma ch", "ma ry", "ma sk", "ma vinject", "ma ccount", "ic ing", "ic it", "ic mp", "ic bot", "ic acls", "ed ia", "at ch", "at ched", "at ching", "at the", "at ra", "Ġus nig", "ro th", "Ġin tro", "Ġin ject", "Ġin line", "Ġin her", "Ġin the", "Ġin strumentation", "Ġin tial", "Ġin jecting", "Ġin built", "Ġin tell", "ecu ted", "Ġex il", "Ġex pl", "Ġex tr", "Ġex porting", "Ġex ported", "Ġex perience", "Ġex plicit", "ar tion", "ar get", "ar igate", "ar tely", "Ġo k", "Ġo pt", "Ġo up", "Ġo pp", "Ġo ption", "Ġo leObject", "Ġo pperation", "as c", "as m", "as ar", "as ures", "as ploit", "as ive", "as tore", "lo ot", "lo cation", "lo sed", "lo tch", "ĠA T", "ĠA sta", "ĠA ppl", "ĠA LL", "ĠA ss", "ĠA li", "ĠA UT", "ĠA gent", "ĠA CL", "ĠA RT", "ĠA bout", "ĠA mn", "ĠA vailable", "et l", "et y", "et asploit", "un install", "ĠS R", "ĠS od", "ĠS ol", "ĠS ay", "ĠS che", "ĠS oft", "ĠS ize", "ĠS ome", "ĠS ource", "ĠS OM", "ĠS ync", "ĠS uspicious", "ĠS ym", "ĠS uccessful", "ĠS ecret", "ĠS NK", "ĠS mall", "ĠS ymbolic", "ĠS ince", "ĠS ACL", "ĠS IEM", "ĠS QLI", "ĠS SP", "ĠS TOP", "ĠS aid", "ĠS mugg", "ĠS uspen", "al er", "al ys", "al ong", "ĠC I", "ĠC ook", "ĠC LS", "ĠC ookies", "ĠC lient", "ĠC opied", "ĠC MSTP", "ĠC VE", "ĠC leared", "ĠT A", "ĠT ech", "ĠT yp", "ĠT amper", "ĠT urn", "ĠT ickets", "ĠT CC", "ĠT akes", "ĠT emplate", "ĠT inyTurla", "ĠT wo", "ĠT arget", "ĠP ost", "ĠP lease", "ĠP UA", "ĠP hishing", "ĠP etitPotam", "ĠP ubPrn", "ĠP PA", "ĠP TH", "ĠP hant", "ĠP ois", "ĠP atching", "ill eged", "ill isecond", "ĠD C", "ĠD ate", "ĠD ot", "ĠD own", "ĠD OS", "ĠD ue", "ĠD ynamic", "ĠD oki", "ĠD CShadow", "ĠD iamorphine", "ĠD YLD", "ta nd", "ta ched", "ta lly", "ers tand", "Ġv md", "Ġv olum", "Ġv Sph", "ul ting", "Ġwill be", "Ġof soft", "Ġof sub", "ith ms", "an k", "an ity", "ate Process", "Ġn ear", "Ġn av", "Ġn ets", "Ġn ested", "Ġn map", "Ġn aming", "Ġn imgrab", "Ġn ominated", "Ġre ver", "Ġre ly", "Ġre vers", "Ġre cover", "Ġre tain", "Ġre bo", "Ġre lev", "Ġre pr", "Ġre porting", "Ġre pair", "Ġre location", "ĠU pen", "Ġbe gr", "Ġbe low", "Ġbe used", "Ġbe hind", "Ġwith the", "est s", "est ine", "ri are", "Win dow", "Win SxS", "Ġcom ponent", "Ġcom bos", "Ġcom svcs", "Ġfile name", "Ġfile Setting", "Ġfile Tries", "tem ent", "Ġma de", "Ġma sk", "Ġma jor", "Ġma ssive", "ĠE B", "ĠE ch", "ĠE sta", "ĠE nt", "ĠE mp", "ĠE ach", "ĠE mail", "ĠE ICAR", "ĠE urop", "Ġis n", "Ġis also", "Ġis sues", "pt hem", "il ing", "il ie", "Ġm et", "Ġm inu", "Ġm ous", "Ġm icrosoft", "Ġm si", "Ġm onit", "Ġm imic", "Ġm ktemp", "Ġm illisecond", "ist s", "Ġlo ose", "ck ing", "ck bit", "Ġ( \"", "Ġ( @", "Ġ( ~", "Ġ( \\\"", "Ġ( *.", "Ġ( )):", "Ġr admin", "Ġr isk", "Ġexecution a", "Ġexecution s", "Ġexecution th", "exe Note", "exe You", "exe Adapted", "ĠR ar", "ĠR ule", "ĠR AM", "ĠR admin", "ĠR ansom", "ĠR DS", "ĠR ight", "ĠR EAD", "ĠR UN", "ĠR tlCreate", "ia ble", "Ġfor m", "Ġfor ge", "Ġfor ward", "Ġfor ked", "ass um", "Ġth ree", "Ġth read", "ur se", "ur rup", "um es", "um ber", "ent ries", "am pl", "ĠWin De", "ĠWin Word", "ĠWin SxS", "Ġtest A", "co vers", "co try", "co urse", "pl ished", "pl aintext", "ĠM ain", "ĠM ig", "ĠM ap", "ĠM shta", "ĠM essages", "ĠM imic", "ĠM irror", "ĠM eas", "ĠM edia", "ĠM atthe", "ĠM etasploit", "ĠThis is", "ĠThis test", "Ġsu re", "Ġsu it", "Ġsu per", "Ġsu ppl", "Ġsu gg", "Ġsu ite", "Ġsu ffic", "ĠI E", "ĠI V", "ĠI fy", "ĠI EX", "ĠI ndirect", "ĠI cedID", "ĠI dentifies", "ĠI OKit", "ct qjf", "Ġl d", "Ġl ess", "Ġl ayer", "Ġl az", "Ġl au", "ĠL ess", "ĠL im", "ĠL ower", "ĠL ine", "ĠL ight", "ĠL ANG", "ĠL inEnum", "Ġcommand line", "Ġcommand let", "qu ire", "qu ip", "qu iring", "Ġcon tinu", "Ġcon ven", "Ġpro fil", "Ġpro gr", "Ġpro tect", "ve y", "Ġan onymous", "Ġan alys", "im porting", "ain ed", "ch k", "ch ild", "Ġh ot", "Ġh unt", "Ġh ang", "Ġh ere", "Ġh ard", "Ġh ap", "Ġh ome", "Ġh ook", "Ġh os", "Ġh alt", "Ġh ijack", "Ġh ijacking", "Ġh anging", "Ġh ardware", "Ġby importing", "Ġuser add", "Ġuser daemon", "ĠF L", "ĠF av", "ĠF IN", "ĠF etch", "ĠF eder", "ĠF rag", "ĠF inally", "ry out", "Ġad apt", "Ġthat art", "Ġthat the", "Ġthat memory", "em ble", "em pty", "em oting", "up s", "up Command", "Ġdis ks", "Ġdis abling", "Ġdis covers", "Ġor dinal", "Ġor iented", "ĠWindows Identity", "ĠWindows Sen", "ĠWindows registry", "ir k", "ay ed", "Ġat r", "Ġat tached", "ĠEx ec", "ĠEx filtr", "ĠEx tend", "ĠEx ploitation", "ĠEx pected", "ĠEx ampl", "ke y", "Ġas ingle", "ice Gu", "Ġrun time", "Ġ\" \"", "Ġ\" (", "Ġ\" -", "Ġ\" /", "Ġ\" =", "Ġ\" :$", "Ġde faults", "Ġde bug", "Ġde obfusc", "st ream", "st artup", "st artion", "ĠPower catTo", "ter pr", "ter fw", "Ġlog ic", "Ġlog host", "Ġlog man", "ĠH ere", "ĠH ence", "ĠH ive", "ĠH VCI", "ĠH owever", "all owRun", "op en", "load s", "cri bed", "ĠG ive", "ĠG UID", "ĠG host", "ĠG ithub", "ĠG PP", "ĠG pg", "ĠG PG", "ĠG riffon", "ĠG amar", "ĠG itHub", "Ġg i", "Ġg pp", "Ġg ap", "Ġg one", "Ġg ives", "Ġg olang", "Ġg ecko", "Ġsuccessf ull", "Ġst ru", "Ġst mx", "id mu", "Shell code", "Shell Host", "Ġen v", "Ġen umer", "Ġen viron", "Ġen force", "Ġen forced", "Ġen ough", "min idump", "unt ested", "ĠUs ern", "ĠUs ername", "Ġmod el", "Ġmod ern", "Ġsuccessful port", "ig ence", "Ġthis we", "Ġthis oleObject", "Ġe g", "Ġe ffect", "Ġe quip", "Ġac com", "out put", "out side", "ĠPowerShell and", "ĠPowerShell Maf", "ĠB uil", "ĠB ased", "ĠB und", "ĠB otnet", "ĠB eg", "ĠB lood", "ĠB lob", "ĠB loodHound", "ĠB az", "ĠB last", "ĠB LIN", "ĠB atch", "ĠB lotch", "for k", "ts hark", "ĠV MD", "ĠV ista", "ĠV IR", "ĠV anity", "Ġdisplay ing", "ĠN ET", "ĠN slookup", "ĠN Map", "ĠN catTo", "ĠN umber", "ack ing", "ĠAd vanced", "ĠIn to", "ĠIn vent", "ĠIn ternal", "ĠIn vok", "ĠO U", "ĠO ST", "ĠO ther", "ĠO bject", "ĠO SA", "ĠO ctopus", "ĠO OBE", "Ġsp eed", "Ġsp read", "Ġsp aces", "Ġwh ile", "Ġsh adowstorage", "Ġsh ape", "ule d", "ost art", "Ġprocess ed", "Ġprocess with", "ĠW LL", "ĠW ann", "ĠW OR", "ĠW rites", "ĠW SR", "ĠW ho", "ĠW evtutil", "ĠW allpaper", "ĠRe load", "ĠRe plic", "ĠRe pair", "ĠRe quiring", "Ġaccount This", "tive ly", "tain s", "tain er", "ous ly", "Ġch ain", "Ġch sh", "Ġch os", "Ġch rome", "ĠDe li", "ĠDe faults", "Ġnew er", "Ġnew ly", "Ġadvers ari", "Ġadvers ely", "Ġdisplayed along", "iqu e", "Ġ` %", "Ġ` -", "Ġ` \\\\", "Ġ` ~/", "tr ate", "tr ation", "tr ue", "tr uncate", "tr usted", "per ty", "per case", "per ature", "Ġse par", "Ġse kurlsa", "Ġse gment", "Ġscript Upon", "ĠLo cker", "ĠLo cated", "ĠLo cale", "Ġregistry Caution", "Ġregistry entries", "ud e", "bl ishes", "to v", "to tally", "Ġcmd s", "Ex ternal", "Ex cel", "pen ing", "OS Config", "ĠK it", "ĠK ext", "ĠK nown", "ĠK ali", "ĠK leop", "ĠK irk", "Ġout dated", "ious SAM", "th at", "th ly", "Ġall the", "forma t", "forma nce", "Ġlocal we", "Ġlocal ized", "Ġdownload ers", "ĠSystem s", "Ġnot hing", "se e", "se kurlsa", "ĠAc tivities", "Ġfolder Example", "ac b", "ac tive", "ac quire", "vent s", "Ġ. ..", "Ġke eps", "so lete", "so cket", "so ckets", "Ġro bust", "Ġuse ful", "Ġinformation s", "Ġinformation Upon", "ĠAt taches", "ĠAt tachment", "ore d", "ore g", "urre nce", "The y", "The se", "Ġtim estomp", "log s", "log ging", "ĠSh ort", "ĠPro file", "ĠPro xies", "Ġwhich will", "32 83", "Ġspec fic", "ĠCon str", "ĠCon tent", "ĠCon sequently", "ĠCon nec", "el s", "el iks", "Ġhost ing", "Ġper ipheral", "Ġper tains", "Ġper formance", "ĠEn v", "ĠEn ables", "ĠEn code", "ĠEn terpr", "In jection", "In tegrity", "In clude", "In jecting", "ag ed", "Ġwe vtutil", "ection s", "pp k", "pp s", "pp ing", "Pro xy", "Pro perties", "Pro perty", "Ġun ame", "Ġun zip", "Ġun like", "Ġun quoted", "Ġun authorized", "Ġun ique", "Ġal tit", "Ġal ert", "Ġal gor", "Ġal ters", "Ġal erting", "Ġar bit", "Ġar chi", "Ġar tifact", "Ġar rays", "Ġaccess s", "Ġaccess ibl", "Ġaccess chk", "ĠCh ain", "ĠCh unks", "ere fore", "Ġdo ing", "Cre dential", "LL MN", "Ġutility This", "Ġi tems", "Ġi dentifies", "Ġi oreg", "Ġca ched", "Ġca ption", "Ġca ution", "Ġca using", "Ġoutput s", "ress ion", "vir t", "Ġkey word", "Ġkey name", "Ġkey HKLM", "Ġkey chain", "Ġkey that", "ĠAdmin istrative", "ĠAdmin startion", "Create File", "Create Cronj", "Ġk uhl", "Ġtr icbot", "Ġpriv led", "Ġpriv illeged", "Ġpriv ilie", "eth ing", "quer y", "En v", "bo se", "ru ctive", "ĠSt ores", "ĠSt oring", "ĠSt yle", "ĠSt arting", "ĠSt orage", "ĠDirectory Search", "Ġval uable", "ev en", "Dis abling", "Dis allowRun", "cl ip", "cl ipboard", "mon thly", "ick est", "Lo ckbit", "fil terfw", "Ġconfig ures", "Ġsc an", "Ġsc enes", "gr ant", "po stex", "Ġrequ ested", "Ġrequ iring", "Ad vanced", "Re al", "Re gistry", "Re fle", "Re gsv", "Re quired", "Re pRo", "Ġle ad", "Ġle ads", "De fender", "De ploy", "De obfusc", "De letes", "Ġem bed", "Ġcl ic", "Ġcl and", "Ġcl oned", "Ġpre ference", "Ġpre ca", "Ġpre cur", "Ġpre fix", "Ġpre par", "Ġpre pare", "ap i", "ap ple", "Ġexecutable Upon", "Ġres ide", "Ġres olution", "Ġres ulting", "Ġres emble", "ĠFile name", "ĠFile less", "00 7", "Ġ1 20", "Ġ1 80", "ĠAD Recon", "ĠAzure Autom", "ĠDLL S", "ĠDLL RegisterServer", "Ġcomp iling", "Ġdele gated", "ĠAdd ToHistoryHandler", "and Property", "do es", "port proxy", "ument List", "ument list", "Ġatomic No", "ff ee", "ero ot", "Ġcheck box", "ĠService Dll", "Ġstd in", "Disable No", "AP Filter", "act ing", "act ise", "Ġ2 316", "Ġtask bar", "Ġab uses", "Ġab used", "Ġpr ints", "Ġpr inting", "Ġpr esented", "Ġpr actise", "Ġover write", "Ġover ride", "Ġover come", "ans wers", "Ġbinary Cookies", "Ġman ner", "ĠActive Directory", "Domain PasswordSpray", "ĠJ SE", "ĠJ uicy", "Ġview ing", "Ġview point", "Ġview the", "Ġno tic", "Ġno vel", "Ġno ise", ".. .\"", ".. ...", "tiv ated", "Ġver bos", "Ġver bose", "du ced", "pro j", "pro gram", "Ġprompt s", "Ġthrough out", "uration s", "Ġspawn ing", ":\\ `,", ":\\ \\..", "Ġwhen ever", "Ġwhen CMD", "Ġmess sage", "Process Name", "Process Refle", "Con sentPromptBehaviorAdmin", "Sh im", "Sh are", "Sh ould", "Sh ortcut", "Sh ares", "Ġaut ostart", "Ġnetwork sPython", "Ġlogs Upon", "ĠLog on", "System Ro", "tic ally", "ord s", "Ġrec ycle", "Ġload er", "Ġli ving", "ĠExecution s", "Ġlaunch ctl", "LE GIT", "name Execution", "Ġ' (", "Ġ' /", "Ġ' :$", "tif esta", "Ġob jec", "Ġmodif iy", "yth ing", "Ġ$ _.", "Ġes xcli", "Ġes cape", "Ġinter cept", "Ġinter upt", "Ġother checks", "Ġother wise", "ĠAut h", "ĠAut hor", "ĠAut horized", "Ġdisable windows", "Ġj avascript", "Ġquer ied", "Ġpar sed", "Ġloc ate", "Ġloc ations", "ĠKe eps", "Ġsta ys", "Ġsta tic", "Ġsta ged", "Ġsta ndpoint", "Ġsta tement", "ĠDownload ed", "Ġits path", "ĠGroup er", "ĠAtomic Red", "ĠAtomic Shim", "Ġperform ing", "Dump Write", "NS udo", "Ġz one", "Ġz ones", "Ġsecond ary", "ased ups", "ĠSet File", "ĠTh read", "ĠUAC DisableNo", "ĠRemote Upon", "ĠRemote App", "ĠNT USER", "ĠNT FS", "Power Dump", "Power cat", "Power Up", "Set upCommand", "ab f", "ab use", "ab orate", "file name", "net sh", "net rc", "Ġ3 65", "ĠQ bot", "Ġecho s", "Ġecho es", "Ġecho ing", "Ġafter wards", "erb ird", "Ġserv ed", "ĠRun Pre", "ĠRun book", "Delete Log", "AT ION", "Pack age", "WMI Method", "Ġpl an", "Ġbut does", "Ġevent logs", "Ġmodification s", "bedd ed", "At taches", "At tachment", "At bro", "get globalstate", "Ġ0 1", "Ġ0 2", "Ġ0 3", "Ġ0 4", "Ġ0 5", "Ġ0 6", "Ġ0 7", "Ġ0 8", "Ġ0 9", "Ġtyp ing", "Ġund ocum", "Ġund erstand", "RE vil", "Script Control", "password sdb", "und erbird", "Ġcer treq", "Ġcer tificates", "Ġfind ing", "Ġfind str", "Ġins all", "Ġins ight", "Ġins erts", "Ġins pection", "ĠSSH Remote", "ĠSSH Local", "Ġoff ensive", "Ġnet mask", "ĠRed Line", "ĠRed hat", "ific ant", "ĠMan ufacturer", "Ġsudo ers", "ĠHIST CONTROL", "ĠLocal Upon", "ĠLocal Admin", "ĠChrom es", "point ers", "10 36", "10 33", "10 86", "10 98", "li er", "li ve", "Ġown ed", "Ġtext Extraction", "Ġsys mon", "Ġsys ctl", "Ġsys temand", "Ġwrit able", "ĠShell code", "ĠSim ple", "ĠSim ulation", "ĠUn til", "ĠUn quoted", "ĠUn loads", "Ġlogin s", "Ġsystems Upon", "Execu tes", "Ġarg s", "Ġarg uement", "St ream", "St orage", "de lete", "de tect", "de faults", "de letion", "fore ns", "Ġim pa", "install ed", "install type", "Ġapp s", "Ġapp rop", "Ġapp eal", "ĠSc arab", "ĠRes olution", "ĠInstall s", "ĠInstall ed", "ĠInstall Helper", "Install ed", "Install ation", "Install Helper", "ĠKey chain", "11 15", "11 33", "11 27", "11 40", "List Cronj", "List Secrets", "Remote PC", "ak teull", "cs r", "cs v", "cs proj", "Ġer asedups", "Ġer lier", "Ġclear ing", "Ġclear ance", "ĠSys log", "ĠSys WOW", "ĠSys tema", "ĠExplorer Sync", "Ġspecific ally", "Add ToHistoryHandler", "Ġ20 16", "Ġ20 19", "Ġtarget ing", "Ch rome", "Run DLL", "Run PE", "Ġip Upon", "Ġpo ints", "Ġpo inting", "Ġpo inted", "Ġoper ate", "ĠSp read", "ĠSp aw", "Ġrest ric", "Ġrest oration", "ĠRem oting", "Ġsub domain", "Ġsub vert", "Ġsub folders", "Ġsub mits", "Ġsub tree", "Ġgener ation", "Ġgener ates", "Ġpasswords DB", "Ġev il", "Ġev asive", "Ġinstallation rar", "Ġinstallation wz", "Ġscreen saver", "LI BR", "Ġaudit ing", "ĠCom admin", "ĠCom munication", "ĠCom ponent", "ĠList ing", "ĠList View", "ĠFiles ystem", "Ġdetection s", "Ġget ting", "ĠBlack Hat", "Ġwork ing", "Util ize", "ob solete", "ĠAl tWin", "Ġthreat s", "ĠIP C", "Ġdisk shadow", "Atomic User", "Atomic Red", "Atomic Administrator", "Copy ing", "NET Upon", "cc onf", "com admin", "com svcs", "ition al", "mod ify", "Ġ5 2", "Ġ5 3", "Ġ5 4", "Ġhe ap", "Ġsensitive files", "Ġexe Upon", "ĠScript s", "ĠScript let", "ĠScript Control", "ĠCheck s", "ĠCheck IfInstallable", "ĠComp iles", "ĠComp ati", "ĠEvent Code", "Ġass umes", "Log on", "Log off", "Log MeIn", "Ġautom ate", "Ġautom ation", "Service V", "zip was", "Ġflag ged", "Ġinf ections", "ĠTask Scheduler", "ĠPersistence Upon", "Ġnon standard", "Ġms fven", "Ġcontroller An", "Ġbypass ing", "Ġdiscover ed", "ĠOffice is", "ĠOffice application", "Ġwho is", "Ġwho le", "Ġallow ed", "Ġvariables Upon", "ĠScan ner", "AD Object", "AD Recon", "Tr ickbot", "pr inten", "ĠX LM", "ĠX OR", "ĠX LAM", "ĠX ordump", "ĠX clip", "Ġbrute force", "Ġextract ing", "ĠAV s", "ĠAccess ed", "Ġvul ns", "ĠGlobal Flag", "off ice", "ĠBo ot", "ĠĠĠĠ ĠĠĠ", "ĠAuto It", "ĠAuto SUID", "ĠAPI s", "Ġbehavior s", "ER T", "File ProtocolHandler", "IT Y", "Pwd Count", "ale d", "con trol", "cmd line", "Ġ% {", "Ġport proxy", "Ġexfiltration Expected", "ĠAll ows", "ĠDo es", "Ġbefore hand", "Ġelev ate", "ĠDele ting", "ĠDele gation", "ĠDele gate", "ager Load", "Ġlever aged", "Ġbox es", "Ġmanually or", "process es", "Ġappear with", "15 8", "App X", "LO LBA", "US B", "ls m", "service abuse", "we ek", "Ġ4 0", "Ġ4 776", "Ġx Cl", "Ġx lsm", "Ġtry to", "Ġcustom shellhost", "ĠEm ulation", "ĠFire Ey", "ĠOver ride", "ĠOpen ed", "Exec Int", "ĠAttrib ute", "Ġcapture After", "Ġdriver query", "User init", "cron d", "res ults", "text Extraction", "Ġpor table", "ĠTeam Viewer", "ĠPs r", "ĠPort al", "Ġread able", "ĠFor ward", "ĠBrowser Pwn", "ĠVM ware", "ĠVM WARE", "Admin s", "Ġescal ate", "Ġupd ates", "Ġzip ped", "Ġdetermin es", "Open URL", "Test Names", "ci al", "py c", "Ġtake own", "Ġcr ack", "Ġcr ashes", "Ġcr ackmapexec", "Ġcr mlog", "Ġbin aries", "Ġbin path", "ĠServer ity", "ĠPr perties", "ĠMo unted", "ĠMo cking", "Ġlong er", "Ġhash ing", "Ġhash dump", "Ġstream s", "Ġspecify ing", "Ġjournal d", "Ġjournal ctl", "Ġcollect or", "Ġlikely to", "gger ing", "ĠKerberos Pr", "DNS Admins", "Pr inter", "Prompt On", "link er", "pec ific", "pec tives", "Ġ* }", "Ġssh d", "Ġsample f", "Ġfilter ing", "Ġfilter ed", "Ġpat tern", "Ġpat ching", "Ġpers pectives", "mat tifesta", "ĠAr tifact", "ĠCr acking", "ĠDump s", "Ġrel ies", "Ġlook s", "ĠVirtual box", "ĠVirtual Box", "Ġspo ofing", "Enable LUA", "ĠStartup Items", "Ġprint ers", "Ġlocale ctl", "Startup Items", "Ġrigh t", "AR P", "AR T", "All Check", "Aut oIt", "Ass istive", "Gate keeper", "PAC E", "Un load", "Un like", "Web BrowserPassView", "bot h", "ness es", "pre fetch", "Ġ, ,,", "Ġ6 0", "Ġ6 00", "Ġqu eue", "Ġqu ickest", "Ġavoid s", "Ġps child", "Ġdes cription", "Ġdes cribed", "Ġind ustro", "Ġregister ed", "Ġlisten ers", "ĠLaunch Application", "ĠLaunch Daemon", "Ġcons ists", "ĠHash Note", "ĠGr ant", "ĠGr ae", "Ġchoo se", "Exp andProperty", "ĠSharp View", "ĠConfig ure", "ĠLogin Hook", "tification Package", "ĠTool s", "USER NAME", "%\\ ...", "40 444", "Cim Provid", "Cim Session", "For ce", "For ward", "HIST SIZE", "Mal ware", "Mal doc", "Net sh", "Net TCP", "Net Support", "RA ID", "With URL", "not rans", "os ed", "os ascript", "pg p", "inter active", "Ġsw apping", "Ġcat ching", "Ġtoken s", "Ġdest ructive", "ĠSIG MA", "ĠTr usted", "ĠTr ickbot", "ĠPop ular", "Ġmar ker", "ĠESX I", "Ġme ant", "Ġme asures", "Ġanti phis", "Ġdeploy ed", "Ġgr anting", "Ġshow case", "Ġshow casing", "ĠContain ed", "Ġtrans parent", "Ġrecord s", "Ġnetsh netsh", "ĠPerform s", "Ġscreenshot s", "Computer Name", "ĠHelp Text", "Ġfamil y", "19 2", "50 822", "EX E", "EX O", "EX X", "PU BLI", "Pre vent", "Port Proxy", "Sc anning", "Sc enarios", "Sc arab", "comp at", "comp ute", "hing Attachment", "iv ed", "rar ily", "sa maccount", "esent utl", "Ġclo se", "Ġclo ses", "Ġpurpo se", "Ġben gin", "Ġbad PwdCount", "ĠSilent ProcessExit", "ĠPre fetch", "ĠPre feren", "ĠPre vents", "Ġrepl ace", "Ġrepl aces", "ader Deletes", "Ġcombin es", "Ġcombin ed", "ĠEs xcli", "ĠRec ently", "ĠRec ords", "ĠWindow Style", "Ġhand le", "Ġadvan ced", "Ġassoci ation", "Ġ\"$ \"", "Ġ\"$ \".", "Ġemail s", "ĠBrute force", "Extract ing", "Ġrout ine", "Ġlisting s", "Provid e", "Provid ed", "erequis ite", "Ġvalid ate", "Ġvalid ation", "Detect ing", "Ġclick ing", "... `", "Ġcomplete ly", "ĠAutom atic", "Ġplace ment", "Ġunde tectable", "ĠAlternative ly", "ĠClass es", "Ġpersistance Upon", "Ġlooked up", "ĠCanary Token", "Ġsaying it", "Ġcampaign e", "Ġcampaign s", "An yDesk", "Application s", "Audit d", "Be fore", "Launch ctl", "NO TE", "Per ipheral", "Rem oving", "Task Cache", "Wor ks", "aut omatic", "find str", "ms dd", "sc r", "set uid", "sys mon", "sys ctl", "sys internals", "ĠâĢ ĵ", "ĠâĢ ĺ", "Ġtermin ated", "Ġturn ed", "Ġfail ures", "Ġframework s", "Ġword list", "Ġbl ind", "Ġbl ank", "Ġbot tom", "Ġbrows e", "Ġbrowser pwn", "Ġinv alid", "ĠSta ging", "ĠPath ToAtomicsFolder", "ĠDetails and", "Ġvbs cript", "Ġmat ch", "Ġmat ches", "Ġmin i", "Ġ(` ...`", "ĠMach ines", "Ġsupp ort", "Ġsupp ression", "ĠImp acket", "Ġdetect s", "Ġdetect ing", "Ġgather ing", "ĠReg Edit", "Ġunlock s", "Ġuninstall er", "Ġuninstall ing", "Environment s", "Ġprereq s", "Ġmanip ulate", "Ġmanip ulating", "Ġmanip ulation", "ĠRunOnce Ex", "Ġbackdo ors", "lib processhider", "Ġimp acting", "Ġappend s", "ĠScreen capture", "ĠScreen saver", "ĠAPT s", "ĠSpec ified", "ĠSpec ific", "ĠSpec ial", "Ġretriev es", "Logging ServiceV", "Ġreturn s", "Ġreturn ed", "Ġcapability uses", "Ġassociated with", "Paramet ers", "Ġmechanis ms", "20 11", "20 21", "20 12", "Browser Ste", "Check IfInstallable", "Download ed", "Global Flags", "GPP Password", "GPP Passwords", "Imp acket", "Imp air", "LD APFilter", "PE NDIN", "Pl uggable", "Priv ate", "SSH D", "bt m", "binary cookies", "cer treq", "cre dential", "cre dentials", "dis covery", "dis abling", "dec ode", "dec rypt", "pol it", "sec edit", "task manage", "vbs In", "who is", "Ġed ge", "Ġign oring", "Ġsign ature", "Ġsign ificant", "Ġsecure ly", "Ġds enabl", "Ġbits dam", "Ġbreak ing", "Ġocc urrence", "ĠSup ply", "ĠCall ed", "ĠCurrent Tem", "ĠTim er", "Ġreal m", "Ġcontroll ed", "Ġconduct s", "Ġcontact ing", "Ġproceed s", "ĠVisual Basic", "ĠInter gre", "ĠInfo Tech", "ĠWor ming", "ĠDeploy ment", "Ġopens ource", "Ġalter ed", "Ġkill s", "Ġkill ing", "Ġkill ng", "Ġnotification s", "Ġinterest ing", "ĠAtomicTest Har", "Ġimplem entation", "ĠĠĠĠĠĠĠĠ ĠĠ", "ĠĠĠĠĠĠĠĠ ĠĠĠĠĠĠĠĠ", "Ġvulnerability known", "Ġsteal er", "Ġsteal ing", "HISTFILE SIZE", "Ġtransfer and", "Ġtransfer ring", "Ġremov ing", "Ġremov able", "Ġimperson ate", "Ġdialog s", "Ġdialog ue", "28 3283", "56 3", "AS RepRo", "Code Integrity", "Dynamic Compile", "Go ToAssist", "Go ga", "Har coded", "Har vest", "IF M", "MS P", "Min er", "Phis hingAttachment", "Sim ulate", "Sync AppvPublishingServer", "Th read", "Th erefore", "Th underbird", "Wh ere", "Write Virtual", "WOR KS", "bil ity", "ef ly", "mst sc", "rv se", "xls m", "xls x", "ĠZ IP", "Ġtit les", "Ġact ually", "Ġact ual", "ista nt", "Ġco erce", "Ġfo cused", "Ġfru its", "Ġpublic ly", "Ġdaemon s", "Ġdupl ication", "Ġbu cket", "Ġint urrup", "Ġinac tivated", "Ġexploit s", "Ġexploit ing", "arg umentlist", "ĠSensitive Files", "ĠCer tificates", "ĠCustom ShellHost", "ĠCloud Trail", "ĠPl uggable", "ĠPowers polit", "ĠDec ode", "ĠDriver Query", "Ġntds util", "Ġrece ive", "Ġrece ives", "Ġrece ived", "Ġreview the", "ĠUltra Viewer", "Ġmo unt", "Ġmis config", "Ġforest s", "ĠWinRM Upon", "ĠMcA ffee", "Ġsuccess ul", "ĠExit Process", "Ġdepend ing", "Ġdepend enc", "Ġdevelo p", "Ġdevelo per", "Ġdevelo ped", "ĠGo zi", "Ġenc losed", "Ġever ything", "ĠBe fore", "ĠNet Support", "ĠOr dinal", "ĠReporting Mode", "Ġsele ct", "Ġsele cted", "Ġsele ctively", "ĠLock bit", "blue blue", "Exclusion Process", "Exclusion Path", "Exclusion Extension", "OST ap", "Ġwebserver and", "Ġunat tended", "Enforced CodeIntegrity", "Reg asm", "0000 0000", "Ġauthentic ated", "Ġupload ed", "Ġdecre ase", "Ġdecre ases", "Ġdecre asing", "Ġeven ing", "Ġkeystrokes Provided", "ĠNotification s", "ARI ES", "ĠCollect or", "ĠOperation al", "nnnn nnnn", "Screen Connect", "Privile ges", "Ġignore both", "Ġoccur s", "Keys trokes", "nolog ies", "Ġeffec tively", "/* /", "65 1033", "Ac count", "Ac tivate", "Black bit", "Black Cat", "Dev iceGu", "HT A", "HT ML", "He y", "He adless", "Hu Hu", "LegalNotice Text", "LegalNotice Caption", "Mode l", "Qu artely", "Sta ging", "Sta ndard", "SAM R", "Secure Desktop", "Team Viewer", "Ultra Viewer", "Ultra VNC", "\\.. \\", "custom shellhost", "fd g", "hl k", "hta Trickbot", "ib ly", "ie Miner", "jscript Execution", "sub folder", "vest ing", "Ġteam er", "Ġteam viewer", "tex ecuted", "users dps", "Ġdro ps", "Ġdro pping", "Ġour selves", "Ġold checks", "locale ctl", "ĠApple Script", "ĠSw ap", "ĠSw itch", "ĠServ ers", "ĠServ icing", "ĠSub net", "ĠSub sequently", "ĠSteal er", "ĠSteal th", "ali as", "ĠTermin ates", "ĠTermin ateProcess", "ĠPan el", "ĠPan ther", "ĠDirect ories", "Ġvirus es", "Ġrepo sit", "ĠUp load", "ĠUp percase", "add ress", "Ġthing s", "ĠMini DumpWrite", "Ġlim it", "Ġlim iting", "ĠLegalNotice Text", "ĠLegalNotice Caption", "Ġconce al", "Ġconce aled", "Ġprofiles and", "Ġhar ness", "Ġhar vesting", "Ġhid es", "Ġhid ing", "ĠPowerUp SQL", "ĠHe adless", "ĠHe aderDeletes", "Ġel se", "Ġel aborate", "Ġeas ier", "Ġeas iest", "Ġcancel s", "ĠVB script", "ĠVar s", "ĠVar iable", "ĠNt CreateFile", "ĠNt WriteVirtual", "Ġutilis es", "Ġutilis ed", "ĠWe akness", "ĠRegister ing", "ĠRequest ing", "ĠDev ice", "ĠDetect s", "Ġ`.. /", "Ġ`.. `)", "Ġfunctional ities", "Input Arg", "Inbox Rule", "Ġweakness es", "Ġunp ack", "Ġunp atched", "Ġalternative ly", "Ġtrad ecraft", "Ġtrad itional", "Ġprefer red", "Ġresearch er", "Ġ200 8", "Config ure", "Ġrecommend ed", "Ġlib processhider", "Ġlib curl", "Ġparse able", "Ġtriggers pecific", "Ġinfl ight", "Ġinfl uence", "Ġ46 98", "Ġguid ance", "Ġcrash ing", "ĠCradle craft", "Ġquiet ly", "Ġindicate the", "Ġconnec ts", "Ġconnec tivity", "Ġcorrect ly", "Ġmark down", "Ġ80 81", "auth s", "Ġterminates itself", "ĠDDE AUT", "background items", "background taskmanage", "Ġcovert ly", "Ġencod es", "Ġencod ing", "ĠNetsh Helper", "Arg umentList", "Ġtunnel ing", "Ġcorrespond ing", "Ġfacilit ate", "Ġfacilit ating", "Ġdedicated service", "ĠUnique ID", "Ġ\"*\"} ,", "Ġaccording ly", "ĠAllTheThings x", "Ġbadpwdcount Need", "$.. .....", ".]. [", "06 88", "180 9", "986 040", "?\\\" ),", "Ab use", "Ali as", "Bin aries", "Cer tutil", "Coll ect", "Det ail", "Dir ty", "Em bedded", "Eth ernet", "Error Action", "Fire fox", "Full name", "Func Ptr", "Gr ant", "Hive Night", "HOR ITY", "Hypervisor EnforcedCodeIntegrity", "HUH oHo", "INS ERT", "KST ATION", "Kext WithURL", "Kerb rute", "Liv ing", "Lib raries", "Mo unt", "Man agerLoad", "Masquer ade", "Netc at", "Odb cconf", "Ps Exec", "Pow eliks", "Pat tern", "Pers ist", "Pod man", "Payload s", "PSR emoting", "Rec ently", "Ren amed", "RPR N", "So ck", "Sp ace", "Ser iousSAM", "Str ing", "Silent ProcessExit", "Ter mService", "Tri ggering", "Tshark installed", "TMP FILE", "VIB s", "Wmi Method", "XIn itImage", "ama tically", "aure port", "aLo ader", "cr ackmapexec", "fal se", "fron t", "gw re", "hour ly", "kr nl", "lista pps", "menta gent", "oCon tainer", "ojack ing", "pri mary", "pee k", "rt f", "she et", "sur vey", "sim ulating", "seth c", "saf ety", "uation al", "wmi object", "ypp rop", "yQu asar", "Ġic on", "Ġess ential", "Ġill icit", "Ġir revers", "Ġ99 99", "Ġ:~ $", "Ġ@{ \"", "Ġtes texecuted", "Ġtac tic", "Ġtak en", "Ġtweak ing", "inoki bi", "Ġaware ness", "Ġaud io", "Ġatack er", "Ġappl ies", "Ġabo ve", "Ġamon gst", "Ġagr uments", "esentation s", "Ġsec edit", "Ġsom ething", "Ġsit uational", "Ġsol utions", "Ġspl it", "Ġsect or", "Ġsync ing", "Ġsusp end", "Ġshed uled", "Ġsnif fing", "recur se", "Ġcar ryout", "Ġcare fully", "Ġcru cial", "Ġcrypt ojacking", "Ġcsru til", "Ġfas ter", "Ġfeed back", "Ġfalcon d", "Ġfrus trate", "Ġfreed om", "Ġwmip rvse", "Ġtocorre late", "Ġtogeth er", "execu te", "explicit auths", "Ġpan e", "Ġpof ile", "Ġpure powershell", "Ġpher ipheral", "Ġpix els", "Ġpnp util", "Ġpati ent", "Ġphr ase", "Ġdic tionary", "Ġdat astore", "Ġdum pthem", "Ġdire cotry", "Ġdynam ically", "Ġdsed itgroup", "Ġbro ken", "Ġbas ically", "Ġbri efly", "Ġbrit tle", "Ġbund led", "Ġblend ing", "mach ine", "Ġintro duced", "Ġinher its", "Ġintell igence", "Ġexil tration", "Ġexpl oration", "Ġextr acted", "Ġexplicit ly", "Ġopt oin", "Ġoup ut", "Ġopp osed", "ĠAsta roth", "ĠAppl escript", "ĠAss istant", "ĠAli ases", "ĠAUT HORITY", "ĠAmn esia", "ĠSod inokibi", "ĠSol arigate", "ĠSay re", "ĠSche me", "ĠSoft RAID", "ĠSOM E", "ĠSync AppvPublishingServer", "ĠSym link", "ĠSACL These", "ĠSQLI TE", "ĠSmugg ling", "ĠSuspen sion", "ĠCook ieMiner", "ĠCLS ID", "ĠTech nologies", "ĠTyp ically", "ĠPost Message", "ĠPUA s", "ĠPois oning", "ĠDot Net", "ĠDown grade", "Ġvmd ks", "Ġvolum es", "ĠvSph ere", "Ġofsoft ware", "Ġofsub sequent", "Ġnav igate", "Ġnets vcs", "Ġrever ting", "Ġrevers e", "Ġrecover able", "Ġretain ed", "Ġrebo oted", "Ġrelev ant", "Ġrepr esentations", "Ġbegr ayed", "estine ly", "Window Style", "ĠEch o", "ĠEsta blishes", "ĠEnt ry", "ĠEmp ire", "ĠEurop e", "Ġminu te", "Ġmous e", "Ġmonit ored", "Ġmillisecond s", "Ġ()): ```", "Ġexecutionth ere", "ĠRansom EXX", "ĠREAD ME", "ĠRtlCreate ProcessRefle", "assum e", "ĠWinDe fend", "ĠMig ration", "ĠMirror Blast", "ĠMeas ure", "ĠMatthe w", "Ġsuper user", "Ġsuppl y", "Ġsugg ests", "Ġsuffic ient", "ĠIfy ou", "Ġlaz agne", "Ġlau ch", "ĠLim its", "ĠLower case", "Ġcontinu ously", "Ġconven tional", "Ġprofil er", "Ġprogr amatically", "Ġanalys is", "Ġhot fix", "Ġhunt ing", "Ġhard coded", "Ġhap pening", "Ġhos ted", "ĠFav orites", "ĠFeder ation", "ĠFrag ment", "Ġadapt or", "ĠWindowsSen sor", "ĠExfiltr ates", "ĠExampl es", "Ġdebug ging", "Ġdeobfusc ates", "ĠGhost Task", "ĠGamar ue", "Ġgap s", "Ġstru cture", "Ġstmx csr", "Ġenumer ated", "Ġenviron ement", "Ġenforce ment", "ĠUsern ames", "Ġequip ment", "Ġaccom plished", "ĠPowerShellMaf ia", "ĠBuil der", "ĠBund les", "ĠBeg inning", "ĠBlood hound", "ĠBaz aLoader", "ĠBLIN D", "ĠBlotch yQuasar", "ĠVMD Ks", "ĠVIR US", "ĠInvent ory", "ĠInvok es", "ĠOST ap", "ĠOSA Script", "Ġspread sheet", "ĠWann aCry", "ĠWOR KSTATION", "ĠWSR eset", "ĠWho ami", "ĠReplic ating", "Ġchos en", "ĠDeli very", "Ġadversari al", "Ġ`\\\\ .\\`", "Ġsepar ate", "ĠLocker Goga", "External Payloads", "ĠKext ManagerLoad", "ĠKleop atra", "Ġlocalwe bserver", "acquire LSA", "socket filterfw", "ĠConstr ained", "ĠContent Type", "ĠConnec ting", "ĠEnterpr ise", "Ġunzip ped", "Ġunlike ly", "Ġaltit ude", "Ġalgor ithms", "Ġarbit rarily", "Ġarchi ved", "Ġartifact s", "Ġaccessibl ity", "LLMN R", "CreateCronj ob", "Ġprivled ges", "Ġprivilie ges", "ĠDirectorySearch er", "Regsv cs", "Deobfusc ate", "Ġembed s", "Ġcland estinely", "Ġpreca utions", "Ġprecur sor", "Ġprepar ation", "Ġ180 3", "ĠAzureAutom ation", "Ġdelegated as", "ĠatomicNo tificationPackage", "Ġnotic ed", "...\" .", "Ġverbos ity", ":\\\\.. \\\\", "SystemRo ot", "Ġobjec tives", "Ġmodifiy ing", "ĠAuthor ity", "ĠAtomicRed Team", "ĠUACDisableNo tify", "SetupCommand sSection", "ĠRunPre SetupCommandsSection", "Atbro ker", "Ġundocum ented", "forens ic", "Ġimpa ire", "Ġapprop riare", "Ġappeal ing", "ListCronj obs", "akteull en", "ĠSystema s", "ĠSpaw nd", "Ġrestric t", "Ġsubdomain s", "Ġinstallationwz zip", "LIBR ARIES", "ĠCommunication s", "ĠComponent s", "ĠAltWin Sock", "AtomicRed team", "ĠCompati bility", "Ġmsfven om", "printen v", "ĠDelegate Execute", "LOLBA S", "week ly", "ĠxCl ip", "ĠFireEy e", "ExecInt oContainer", "ĠForward ing", "ĠKerberosPr erequisite", "PromptOn SecureDesktop", "mattifesta tion", "AllCheck s", "Ġ,,, ,,", "Ġpschild name", "Ġindustro yer", "ĠGrae ber", "%\\... $.......", "CimProvid er", "Forward To", "NetTCP Connection", "notrans action", "Ġantiphis h", "Ġtransparent ly", "50822 6", "PUBLI C", "samaccount name", "ĠPreferen ces", "automatic ally", "BrowserSte aler", "PENDIN G", "Ġsignificant ly", "Ġdsenabl eroot", "Ġbitsdam in", "ĠCurrentTem perature", "ĠIntergre ty", "ĠAtomicTestHar nesses", "ASRepRo ast", "WORKS PACE", "Ġinturrup tion", "Ġmisconfig urations", "Ġdependenc y", "651033 563", "DeviceGu ard", "HuHu HUHoHo", "Quartely report", "usersdps Light", "Ġreposit ory", "ĠMiniDumpWrite Dump", "ĠNtWriteVirtual Memory", "InputArg s", "ĠDDEAUT O", "backgroundtaskmanage mentagent", "0688 00", "FuncPtr s", "HiveNight mare", "XInitImage FuncPtrs", "Ġirrevers ibly", "ĠRtlCreateProcessRefle ction", "ĠWORKSTATION The", "ĠKextManagerLoad KextWithURL", "%\\...$....... ::$" ] } }