T1547.007
Boot or Logon Autostart Execution: Re-opened Applications
Boot or Logon Autostart Execution: Re-opened Applications
Boot or Logon Autostart Execution: Kernel Modules and Extensions
Boot or Logon Autostart Execution: Security Support Provider
Boot or Logon Autostart Execution: Winlogon Helper DLL
Time Providers