T1547.008
Boot or Logon Autostart Execution: LSASS Driver
Boot or Logon Autostart Execution: LSASS Driver
Boot or Logon Autostart Execution: Re-opened Applications
Boot or Logon Autostart Execution: Kernel Modules and Extensions
Boot or Logon Autostart Execution: Security Support Provider
Boot or Logon Autostart Execution: Winlogon Helper DLL