T1550.002
Use Alternate Authentication Material: Pass the Hash
Use Alternate Authentication Material: Pass the Hash
Abuse Elevation Control Mechanism: Sudo and Sudo Caching
Abuse Elevation Control Mechanism: Bypass User Account Control
Abuse Elevation Control Mechanism: Setuid and Setgid
Boot or Logon Autostart Execution