mapping/OSSECSYSMON_Coverage.svg

<?xml version="1.0" standalone="no"?>
<svg width="1056" height="816" xmlns="http://www.w3.org/2000/svg" id="svgvm2"><g transform="translate(5,5)" style="font-family: sans-serif;"><g><rect width="1046" height="96" style="stroke: black; stroke-width: 1; fill: white;"/><g transform="translate(0,0)"><rect width="1046" height="96" style="stroke-width: 1; stroke: black; fill: white;"/><text transform="translate(6, 24)" dx="0" dy="0" font-size="18pt" fill="black" style="font-weight: bold;"><tspan x="0" dy="0em">OSSEC-SYSMON Coverage</tspan></text></g><line x1="0" x2="1046" y1="96" y2="96" style="stroke: black; stroke-width: 3;"/></g><g transform="translate(0,97)"><g transform="translate(0, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Initial Access</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">11 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Drive-by Compromise</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Exploit Public-Facing</tspan><tspan x="0" dy="0" y="7.73943661971831">Application</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">External Remote</tspan><tspan x="0" dy="0" y="7.73943661971831">Services</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Hardware Additions</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Replication Through</tspan><tspan x="0" dy="0" y="7.73943661971831">Removable Media</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Spearphishing</tspan><tspan x="0" dy="0" y="7.73943661971831">Attachment</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Spearphishing Link</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Spearphishing via</tspan><tspan x="0" dy="0" y="7.73943661971831">Service</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Supply Chain</tspan><tspan x="0" dy="0" y="7.73943661971831">Compromise</tspan></text></g><g transform="translate(0,89.87323943661971)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Trusted Relationship</tspan></text></g><g transform="translate(0,99.85915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Valid Accounts</tspan></text></g></g></g><g transform="translate(87.16666666666667, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Execution</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">34 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">AppleScript</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">CMSTP</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(49, 130, 189);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Command-Line</tspan><tspan x="0" dy="0" y="7.73943661971831">Interface</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Compiled HTML File</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="2.497652582159624">Component Object</tspan><tspan x="0" dy="0" y="5.492957746478873">Model and Distributed</tspan><tspan x="0" dy="0" y="8.48826291079812">COM</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Control Panel Items</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Dynamic Data</tspan><tspan x="0" dy="0" y="7.73943661971831">Exchange</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Execution through API</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Execution through</tspan><tspan x="0" dy="0" y="7.73943661971831">Module Load</tspan></text></g><g transform="translate(0,89.87323943661971)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Exploitation for Client</tspan><tspan x="0" dy="0" y="7.73943661971831">Execution</tspan></text></g><g transform="translate(0,99.85915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Graphical User Interface</tspan></text></g><g transform="translate(0,109.8450704225352)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">InstallUtil</tspan></text></g><g transform="translate(0,119.83098591549296)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Launchctl</tspan></text></g><g transform="translate(0,129.8169014084507)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Local Job Scheduling</tspan></text></g><g transform="translate(0,139.80281690140845)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">LSASS Driver</tspan></text></g><g transform="translate(0,149.78873239436618)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(107, 174, 214);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Mshta</tspan></text></g><g transform="translate(0,159.77464788732394)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">PowerShell</tspan></text></g><g transform="translate(0,169.7605633802817)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Regsvcs/Regasm</tspan></text></g><g transform="translate(0,179.74647887323943)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(107, 174, 214);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Regsvr32</tspan></text></g><g transform="translate(0,189.73239436619718)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Rundll32</tspan></text></g><g transform="translate(0,199.7183098591549)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Scheduled Task</tspan></text></g><g transform="translate(0,209.70422535211267)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Scripting</tspan></text></g><g transform="translate(0,219.6901408450704)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(107, 174, 214);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Service Execution</tspan></text></g><g transform="translate(0,229.67605633802816)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(107, 174, 214);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Signed Binary Proxy</tspan><tspan x="0" dy="0" y="7.73943661971831">Execution</tspan></text></g><g transform="translate(0,239.66197183098592)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Signed Script Proxy</tspan><tspan x="0" dy="0" y="7.73943661971831">Execution</tspan></text></g><g transform="translate(0,249.64788732394365)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Source</tspan></text></g><g transform="translate(0,259.6338028169014)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Space after Filename</tspan></text></g><g transform="translate(0,269.61971830985914)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Third-party Software</tspan></text></g><g transform="translate(0,279.6056338028169)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Trap</tspan></text></g><g transform="translate(0,289.59154929577466)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Trusted Developer</tspan><tspan x="0" dy="0" y="7.73943661971831">Utilities</tspan></text></g><g transform="translate(0,299.57746478873236)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">User Execution</tspan></text></g><g transform="translate(0,309.5633802816901)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(49, 130, 189);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Windows Management</tspan><tspan x="0" dy="0" y="7.73943661971831">Instrumentation</tspan></text></g><g transform="translate(0,319.5492957746479)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Windows Remote</tspan><tspan x="0" dy="0" y="7.73943661971831">Management</tspan></text></g><g transform="translate(0,329.53521126760563)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">XSL Script Processing</tspan></text></g></g></g><g transform="translate(174.33333333333334, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Persistence</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">62 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">.bash_profile and</tspan><tspan x="0" dy="0" y="7.73943661971831">.bashrc</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Accessibility Features</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Account Manipulation</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">AppCert DLLs</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">AppInit DLLs</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Application Shimming</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Authentication Package</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">BITS Jobs</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Bootkit</tspan></text></g><g transform="translate(0,89.87323943661971)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Browser Extensions</tspan></text></g><g transform="translate(0,99.85915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Change Default File</tspan><tspan x="0" dy="0" y="7.73943661971831">Association</tspan></text></g><g transform="translate(0,109.8450704225352)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Component Firmware</tspan></text></g><g transform="translate(0,119.83098591549296)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Component Object</tspan><tspan x="0" dy="0" y="7.73943661971831">Model Hijacking</tspan></text></g><g transform="translate(0,129.8169014084507)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Create Account</tspan></text></g><g transform="translate(0,139.80281690140845)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">DLL Search Order</tspan><tspan x="0" dy="0" y="7.73943661971831">Hijacking</tspan></text></g><g transform="translate(0,149.78873239436618)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Dylib Hijacking</tspan></text></g><g transform="translate(0,159.77464788732394)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Emond</tspan></text></g><g transform="translate(0,169.7605633802817)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">External Remote</tspan><tspan x="0" dy="0" y="7.73943661971831">Services</tspan></text></g><g transform="translate(0,179.74647887323943)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">File System Permissions</tspan><tspan x="0" dy="0" y="7.73943661971831">Weakness</tspan></text></g><g transform="translate(0,189.73239436619718)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Hidden Files and</tspan><tspan x="0" dy="0" y="7.73943661971831">Directories</tspan></text></g><g transform="translate(0,199.7183098591549)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Hooking</tspan></text></g><g transform="translate(0,209.70422535211267)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Hypervisor</tspan></text></g><g transform="translate(0,219.6901408450704)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Image File Execution</tspan><tspan x="0" dy="0" y="7.73943661971831">Options Injection</tspan></text></g><g transform="translate(0,229.67605633802816)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Kernel Modules and</tspan><tspan x="0" dy="0" y="7.73943661971831">Extensions</tspan></text></g><g transform="translate(0,239.66197183098592)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Launch Agent</tspan></text></g><g transform="translate(0,249.64788732394365)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Launch Daemon</tspan></text></g><g transform="translate(0,259.6338028169014)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Launchctl</tspan></text></g><g transform="translate(0,269.61971830985914)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">LC_LOAD_DYLIB Addition</tspan></text></g><g transform="translate(0,279.6056338028169)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Local Job Scheduling</tspan></text></g><g transform="translate(0,289.59154929577466)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Login Item</tspan></text></g><g transform="translate(0,299.57746478873236)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Logon Scripts</tspan></text></g><g transform="translate(0,309.5633802816901)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">LSASS Driver</tspan></text></g><g transform="translate(0,319.5492957746479)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Modify Existing Service</tspan></text></g><g transform="translate(0,329.53521126760563)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Netsh Helper DLL</tspan></text></g><g transform="translate(0,339.5211267605634)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">New Service</tspan></text></g><g transform="translate(0,349.5070422535211)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Office Application</tspan><tspan x="0" dy="0" y="7.73943661971831">Startup</tspan></text></g><g transform="translate(0,359.49295774647885)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Path Interception</tspan></text></g><g transform="translate(0,369.4788732394366)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Plist Modification</tspan></text></g><g transform="translate(0,379.46478873239437)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Port Knocking</tspan></text></g><g transform="translate(0,389.45070422535207)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Port Monitors</tspan></text></g><g transform="translate(0,399.4366197183098)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">PowerShell Profile</tspan></text></g><g transform="translate(0,409.4225352112676)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Rc.common</tspan></text></g><g transform="translate(0,419.40845070422534)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Re-opened Applications</tspan></text></g><g transform="translate(0,429.3943661971831)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Redundant Access</tspan></text></g><g transform="translate(0,439.3802816901408)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Registry Run Keys /</tspan><tspan x="0" dy="0" y="7.73943661971831">Startup Folder</tspan></text></g><g transform="translate(0,449.36619718309856)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Scheduled Task</tspan></text></g><g transform="translate(0,459.3521126760563)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Screensaver</tspan></text></g><g transform="translate(0,469.3380281690141)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Security Support</tspan><tspan x="0" dy="0" y="7.73943661971831">Provider</tspan></text></g><g transform="translate(0,479.32394366197184)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Server Software</tspan><tspan x="0" dy="0" y="7.73943661971831">Component</tspan></text></g><g transform="translate(0,489.30985915492954)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Service Registry</tspan><tspan x="0" dy="0" y="7.73943661971831">Permissions Weakness</tspan></text></g><g transform="translate(0,499.2957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Setuid and Setgid</tspan></text></g><g transform="translate(0,509.28169014084506)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Shortcut Modification</tspan></text></g><g transform="translate(0,519.2676056338028)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">SIP and Trust Provider</tspan><tspan x="0" dy="0" y="7.73943661971831">Hijacking</tspan></text></g><g transform="translate(0,529.2535211267606)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Startup Items</tspan></text></g><g transform="translate(0,539.2394366197183)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">System Firmware</tspan></text></g><g transform="translate(0,549.225352112676)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Systemd Service</tspan></text></g><g transform="translate(0,559.2112676056338)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Time Providers</tspan></text></g><g transform="translate(0,569.1971830985915)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Trap</tspan></text></g><g transform="translate(0,579.1830985915493)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Valid Accounts</tspan></text></g><g transform="translate(0,589.169014084507)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Web Shell</tspan></text></g><g transform="translate(0,599.1549295774647)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="2.497652582159624">Windows Management</tspan><tspan x="0" dy="0" y="5.492957746478873">Instrumentation Event</tspan><tspan x="0" dy="0" y="8.48826291079812">Subscription</tspan></text></g><g transform="translate(0,609.1408450704225)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Winlogon Helper DLL</tspan></text></g></g></g><g transform="translate(261.5, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Privilege</tspan><tspan x="0" dy="1.1em">Escalation</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">32 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Access Token</tspan><tspan x="0" dy="0" y="7.73943661971831">Manipulation</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Accessibility Features</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">AppCert DLLs</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">AppInit DLLs</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Application Shimming</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Bypass User Account</tspan><tspan x="0" dy="0" y="7.73943661971831">Control</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">DLL Search Order</tspan><tspan x="0" dy="0" y="7.73943661971831">Hijacking</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Dylib Hijacking</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Elevated Execution with</tspan><tspan x="0" dy="0" y="7.73943661971831">Prompt</tspan></text></g><g transform="translate(0,89.87323943661971)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Emond</tspan></text></g><g transform="translate(0,99.85915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Exploitation for</tspan><tspan x="0" dy="0" y="7.73943661971831">Privilege Escalation</tspan></text></g><g transform="translate(0,109.8450704225352)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Extra Window Memory</tspan><tspan x="0" dy="0" y="7.73943661971831">Injection</tspan></text></g><g transform="translate(0,119.83098591549296)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">File System Permissions</tspan><tspan x="0" dy="0" y="7.73943661971831">Weakness</tspan></text></g><g transform="translate(0,129.8169014084507)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Hooking</tspan></text></g><g transform="translate(0,139.80281690140845)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Image File Execution</tspan><tspan x="0" dy="0" y="7.73943661971831">Options Injection</tspan></text></g><g transform="translate(0,149.78873239436618)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Launch Daemon</tspan></text></g><g transform="translate(0,159.77464788732394)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">New Service</tspan></text></g><g transform="translate(0,169.7605633802817)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Parent PID Spoofing</tspan></text></g><g transform="translate(0,179.74647887323943)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Path Interception</tspan></text></g><g transform="translate(0,189.73239436619718)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Plist Modification</tspan></text></g><g transform="translate(0,199.7183098591549)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Port Monitors</tspan></text></g><g transform="translate(0,209.70422535211267)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">PowerShell Profile</tspan></text></g><g transform="translate(0,219.6901408450704)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Process Injection</tspan></text></g><g transform="translate(0,229.67605633802816)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Scheduled Task</tspan></text></g><g transform="translate(0,239.66197183098592)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Service Registry</tspan><tspan x="0" dy="0" y="7.73943661971831">Permissions Weakness</tspan></text></g><g transform="translate(0,249.64788732394365)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Setuid and Setgid</tspan></text></g><g transform="translate(0,259.6338028169014)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">SID-History Injection</tspan></text></g><g transform="translate(0,269.61971830985914)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Startup Items</tspan></text></g><g transform="translate(0,279.6056338028169)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Sudo</tspan></text></g><g transform="translate(0,289.59154929577466)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Sudo Caching</tspan></text></g><g transform="translate(0,299.57746478873236)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Valid Accounts</tspan></text></g><g transform="translate(0,309.5633802816901)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Web Shell</tspan></text></g></g></g><g transform="translate(348.6666666666667, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Defense Evasion</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">69 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Access Token</tspan><tspan x="0" dy="0" y="7.73943661971831">Manipulation</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Binary Padding</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">BITS Jobs</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Bypass User Account</tspan><tspan x="0" dy="0" y="7.73943661971831">Control</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Clear Command History</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">CMSTP</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Code Signing</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Compile After Delivery</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Compiled HTML File</tspan></text></g><g transform="translate(0,89.87323943661971)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Component Firmware</tspan></text></g><g transform="translate(0,99.85915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Component Object</tspan><tspan x="0" dy="0" y="7.73943661971831">Model Hijacking</tspan></text></g><g transform="translate(0,109.8450704225352)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Connection Proxy</tspan></text></g><g transform="translate(0,119.83098591549296)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Control Panel Items</tspan></text></g><g transform="translate(0,129.8169014084507)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">DCShadow</tspan></text></g><g transform="translate(0,139.80281690140845)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Deobfuscate/Decode</tspan><tspan x="0" dy="0" y="7.73943661971831">Files or Information</tspan></text></g><g transform="translate(0,149.78873239436618)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(107, 174, 214);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Disabling Security Tools</tspan></text></g><g transform="translate(0,159.77464788732394)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">DLL Search Order</tspan><tspan x="0" dy="0" y="7.73943661971831">Hijacking</tspan></text></g><g transform="translate(0,169.7605633802817)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">DLL Side-Loading</tspan></text></g><g transform="translate(0,179.74647887323943)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Execution Guardrails</tspan></text></g><g transform="translate(0,189.73239436619718)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Exploitation for Defense</tspan><tspan x="0" dy="0" y="7.73943661971831">Evasion</tspan></text></g><g transform="translate(0,199.7183098591549)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Extra Window Memory</tspan><tspan x="0" dy="0" y="7.73943661971831">Injection</tspan></text></g><g transform="translate(0,209.70422535211267)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="2.497652582159624">File and Directory</tspan><tspan x="0" dy="0" y="5.492957746478873">Permissions</tspan><tspan x="0" dy="0" y="8.48826291079812">Modification</tspan></text></g><g transform="translate(0,219.6901408450704)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">File Deletion</tspan></text></g><g transform="translate(0,229.67605633802816)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">File System Logical</tspan><tspan x="0" dy="0" y="7.73943661971831">Offsets</tspan></text></g><g transform="translate(0,239.66197183098592)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Gatekeeper Bypass</tspan></text></g><g transform="translate(0,249.64788732394365)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Group Policy</tspan><tspan x="0" dy="0" y="7.73943661971831">Modification</tspan></text></g><g transform="translate(0,259.6338028169014)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Hidden Files and</tspan><tspan x="0" dy="0" y="7.73943661971831">Directories</tspan></text></g><g transform="translate(0,269.61971830985914)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Hidden Users</tspan></text></g><g transform="translate(0,279.6056338028169)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Hidden Window</tspan></text></g><g transform="translate(0,289.59154929577466)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">HISTCONTROL</tspan></text></g><g transform="translate(0,299.57746478873236)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Image File Execution</tspan><tspan x="0" dy="0" y="7.73943661971831">Options Injection</tspan></text></g><g transform="translate(0,309.5633802816901)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Indicator Blocking</tspan></text></g><g transform="translate(0,319.5492957746479)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Indicator Removal from</tspan><tspan x="0" dy="0" y="7.73943661971831">Tools</tspan></text></g><g transform="translate(0,329.53521126760563)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Indicator Removal on</tspan><tspan x="0" dy="0" y="7.73943661971831">Host</tspan></text></g><g transform="translate(0,339.5211267605634)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Indirect Command</tspan><tspan x="0" dy="0" y="7.73943661971831">Execution</tspan></text></g><g transform="translate(0,349.5070422535211)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Install Root Certificate</tspan></text></g><g transform="translate(0,359.49295774647885)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">InstallUtil</tspan></text></g><g transform="translate(0,369.4788732394366)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Launchctl</tspan></text></g><g transform="translate(0,379.46478873239437)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">LC_MAIN Hijacking</tspan></text></g><g transform="translate(0,389.45070422535207)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Masquerading</tspan></text></g><g transform="translate(0,399.4366197183098)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Modify Registry</tspan></text></g><g transform="translate(0,409.4225352112676)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(107, 174, 214);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Mshta</tspan></text></g><g transform="translate(0,419.40845070422534)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Network Share</tspan><tspan x="0" dy="0" y="7.73943661971831">Connection Removal</tspan></text></g><g transform="translate(0,429.3943661971831)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">NTFS File Attributes</tspan></text></g><g transform="translate(0,439.3802816901408)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Obfuscated Files or</tspan><tspan x="0" dy="0" y="7.73943661971831">Information</tspan></text></g><g transform="translate(0,449.36619718309856)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Parent PID Spoofing</tspan></text></g><g transform="translate(0,459.3521126760563)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Plist Modification</tspan></text></g><g transform="translate(0,469.3380281690141)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Port Knocking</tspan></text></g><g transform="translate(0,479.32394366197184)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Process Doppelgänging</tspan></text></g><g transform="translate(0,489.30985915492954)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Process Hollowing</tspan></text></g><g transform="translate(0,499.2957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Process Injection</tspan></text></g><g transform="translate(0,509.28169014084506)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Redundant Access</tspan></text></g><g transform="translate(0,519.2676056338028)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Regsvcs/Regasm</tspan></text></g><g transform="translate(0,529.2535211267606)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(107, 174, 214);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Regsvr32</tspan></text></g><g transform="translate(0,539.2394366197183)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Rootkit</tspan></text></g><g transform="translate(0,549.225352112676)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Rundll32</tspan></text></g><g transform="translate(0,559.2112676056338)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Scripting</tspan></text></g><g transform="translate(0,569.1971830985915)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(107, 174, 214);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Signed Binary Proxy</tspan><tspan x="0" dy="0" y="7.73943661971831">Execution</tspan></text></g><g transform="translate(0,579.1830985915493)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Signed Script Proxy</tspan><tspan x="0" dy="0" y="7.73943661971831">Execution</tspan></text></g><g transform="translate(0,589.169014084507)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">SIP and Trust Provider</tspan><tspan x="0" dy="0" y="7.73943661971831">Hijacking</tspan></text></g><g transform="translate(0,599.1549295774647)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Software Packing</tspan></text></g><g transform="translate(0,609.1408450704225)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Space after Filename</tspan></text></g><g transform="translate(0,619.1267605633802)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Template Injection</tspan></text></g><g transform="translate(0,629.112676056338)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Timestomp</tspan></text></g><g transform="translate(0,639.0985915492957)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Trusted Developer</tspan><tspan x="0" dy="0" y="7.73943661971831">Utilities</tspan></text></g><g transform="translate(0,649.0845070422534)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Valid Accounts</tspan></text></g><g transform="translate(0,659.0704225352113)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Virtualization/Sandbox</tspan><tspan x="0" dy="0" y="7.73943661971831">Evasion</tspan></text></g><g transform="translate(0,669.056338028169)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Web Service</tspan></text></g><g transform="translate(0,679.0422535211268)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">XSL Script Processing</tspan></text></g></g></g><g transform="translate(435.83333333333337, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Credential Access</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">21 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Account Manipulation</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Bash History</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Brute Force</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(107, 174, 214);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Credential Dumping</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Credentials from Web</tspan><tspan x="0" dy="0" y="7.73943661971831">Browsers</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Credentials in Files</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Credentials in Registry</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Exploitation for</tspan><tspan x="0" dy="0" y="7.73943661971831">Credential Access</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Forced Authentication</tspan></text></g><g transform="translate(0,89.87323943661971)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Hooking</tspan></text></g><g transform="translate(0,99.85915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Input Capture</tspan></text></g><g transform="translate(0,109.8450704225352)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Input Prompt</tspan></text></g><g transform="translate(0,119.83098591549296)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Kerberoasting</tspan></text></g><g transform="translate(0,129.8169014084507)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Keychain</tspan></text></g><g transform="translate(0,139.80281690140845)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">LLMNR/NBT-NS</tspan><tspan x="0" dy="0" y="7.73943661971831">Poisoning and Relay</tspan></text></g><g transform="translate(0,149.78873239436618)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Network Sniffing</tspan></text></g><g transform="translate(0,159.77464788732394)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Password Filter DLL</tspan></text></g><g transform="translate(0,169.7605633802817)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Private Keys</tspan></text></g><g transform="translate(0,179.74647887323943)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Securityd Memory</tspan></text></g><g transform="translate(0,189.73239436619718)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Steal Web Session</tspan><tspan x="0" dy="0" y="7.73943661971831">Cookie</tspan></text></g><g transform="translate(0,199.7183098591549)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="2.497652582159624">Two-Factor</tspan><tspan x="0" dy="0" y="5.492957746478873">Authentication</tspan><tspan x="0" dy="0" y="8.48826291079812">Interception</tspan></text></g></g></g><g transform="translate(523, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Discovery</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">23 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Account Discovery</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Application Window</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Browser Bookmark</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Domain Trust Discovery</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">File and Directory</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Network Service</tspan><tspan x="0" dy="0" y="7.73943661971831">Scanning</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Network Share</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Network Sniffing</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Password Policy</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,89.87323943661971)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Peripheral Device</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,99.85915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Permission Groups</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,109.8450704225352)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Process Discovery</tspan></text></g><g transform="translate(0,119.83098591549296)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Query Registry</tspan></text></g><g transform="translate(0,129.8169014084507)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Remote System</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,139.80281690140845)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Security Software</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,149.78873239436618)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Software Discovery</tspan></text></g><g transform="translate(0,159.77464788732394)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">System Information</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,169.7605633802817)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">System Network</tspan><tspan x="0" dy="0" y="7.73943661971831">Configuration Discovery</tspan></text></g><g transform="translate(0,179.74647887323943)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">System Network</tspan><tspan x="0" dy="0" y="7.73943661971831">Connections Discovery</tspan></text></g><g transform="translate(0,189.73239436619718)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">System Owner/User</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,199.7183098591549)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">System Service</tspan><tspan x="0" dy="0" y="7.73943661971831">Discovery</tspan></text></g><g transform="translate(0,209.70422535211267)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">System Time Discovery</tspan></text></g><g transform="translate(0,219.6901408450704)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Virtualization/Sandbox</tspan><tspan x="0" dy="0" y="7.73943661971831">Evasion</tspan></text></g></g></g><g transform="translate(610.1666666666667, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Lateral Movement</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">18 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">AppleScript</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Application Deployment</tspan><tspan x="0" dy="0" y="7.73943661971831">Software</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="2.497652582159624">Component Object</tspan><tspan x="0" dy="0" y="5.492957746478873">Model and Distributed</tspan><tspan x="0" dy="0" y="8.48826291079812">COM</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Exploitation of Remote</tspan><tspan x="0" dy="0" y="7.73943661971831">Services</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Internal Spearphishing</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Logon Scripts</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Pass the Hash</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Pass the Ticket</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Remote Desktop</tspan><tspan x="0" dy="0" y="7.73943661971831">Protocol</tspan></text></g><g transform="translate(0,89.87323943661971)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Remote File Copy</tspan></text></g><g transform="translate(0,99.85915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Remote Services</tspan></text></g><g transform="translate(0,109.8450704225352)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Replication Through</tspan><tspan x="0" dy="0" y="7.73943661971831">Removable Media</tspan></text></g><g transform="translate(0,119.83098591549296)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Shared Webroot</tspan></text></g><g transform="translate(0,129.8169014084507)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">SSH Hijacking</tspan></text></g><g transform="translate(0,139.80281690140845)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Taint Shared Content</tspan></text></g><g transform="translate(0,149.78873239436618)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Third-party Software</tspan></text></g><g transform="translate(0,159.77464788732394)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Windows Admin Shares</tspan></text></g><g transform="translate(0,169.7605633802817)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(158, 202, 225);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Windows Remote</tspan><tspan x="0" dy="0" y="7.73943661971831">Management</tspan></text></g></g></g><g transform="translate(697.3333333333334, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Collection</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">13 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Audio Capture</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Automated Collection</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Clipboard Data</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Data from Information</tspan><tspan x="0" dy="0" y="7.73943661971831">Repositories</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Data from Local System</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Data from Network</tspan><tspan x="0" dy="0" y="7.73943661971831">Shared Drive</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Data from Removable</tspan><tspan x="0" dy="0" y="7.73943661971831">Media</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Data Staged</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Email Collection</tspan></text></g><g transform="translate(0,89.87323943661971)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Input Capture</tspan></text></g><g transform="translate(0,99.85915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Man in the Browser</tspan></text></g><g transform="translate(0,109.8450704225352)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Screen Capture</tspan></text></g><g transform="translate(0,119.83098591549296)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Video Capture</tspan></text></g></g></g><g transform="translate(784.5, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Command And</tspan><tspan x="0" dy="1.1em">Control</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">22 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Commonly Used Port</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="2.497652582159624">Communication</tspan><tspan x="0" dy="0" y="5.492957746478873">Through Removable</tspan><tspan x="0" dy="0" y="8.48826291079812">Media</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Connection Proxy</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Custom Command and</tspan><tspan x="0" dy="0" y="7.73943661971831">Control Protocol</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Custom Cryptographic</tspan><tspan x="0" dy="0" y="7.73943661971831">Protocol</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Data Encoding</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Data Obfuscation</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Domain Fronting</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Domain Generation</tspan><tspan x="0" dy="0" y="7.73943661971831">Algorithms</tspan></text></g><g transform="translate(0,89.87323943661971)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Fallback Channels</tspan></text></g><g transform="translate(0,99.85915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Multi-hop Proxy</tspan></text></g><g transform="translate(0,109.8450704225352)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Multi-Stage Channels</tspan></text></g><g transform="translate(0,119.83098591549296)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Multiband</tspan><tspan x="0" dy="0" y="7.73943661971831">Communication</tspan></text></g><g transform="translate(0,129.8169014084507)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Multilayer Encryption</tspan></text></g><g transform="translate(0,139.80281690140845)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Port Knocking</tspan></text></g><g transform="translate(0,149.78873239436618)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Remote Access Tools</tspan></text></g><g transform="translate(0,159.77464788732394)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(198, 219, 239);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Remote File Copy</tspan></text></g><g transform="translate(0,169.7605633802817)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Standard Application</tspan><tspan x="0" dy="0" y="7.73943661971831">Layer Protocol</tspan></text></g><g transform="translate(0,179.74647887323943)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Standard Cryptographic</tspan><tspan x="0" dy="0" y="7.73943661971831">Protocol</tspan></text></g><g transform="translate(0,189.73239436619718)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="2.497652582159624">Standard</tspan><tspan x="0" dy="0" y="5.492957746478873">Non-Application Layer</tspan><tspan x="0" dy="0" y="8.48826291079812">Protocol</tspan></text></g><g transform="translate(0,199.7183098591549)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Uncommonly Used Port</tspan></text></g><g transform="translate(0,209.70422535211267)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Web Service</tspan></text></g></g></g><g transform="translate(871.6666666666667, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Exfiltration</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">9 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Automated Exfiltration</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Data Compressed</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Data Encrypted</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Data Transfer Size</tspan><tspan x="0" dy="0" y="7.73943661971831">Limits</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Exfiltration Over</tspan><tspan x="0" dy="0" y="7.73943661971831">Alternative Protocol</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="2.497652582159624">Exfiltration Over</tspan><tspan x="0" dy="0" y="5.492957746478873">Command and Control</tspan><tspan x="0" dy="0" y="8.48826291079812">Channel</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Exfiltration Over Other</tspan><tspan x="0" dy="0" y="7.73943661971831">Network Medium</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Exfiltration Over</tspan><tspan x="0" dy="0" y="7.73943661971831">Physical Medium</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Scheduled Transfer</tspan></text></g></g></g><g transform="translate(958.8333333333334, 0)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="19.971830985915492" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 8.242957746478872)" style="fill: black; font-weight: bold;" dx="0" dy="0"><tspan x="0" dy="0em">Impact</tspan></text><text font-size="6pt" transform="translate(3, 17.72887323943662)" style="fill: black;" dx="0" dy="0"><tspan x="0" dy="0em">16 items</tspan></text></g><g transform="translate(0,19.971830985915492)"><g transform="translate(0,0)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Account Access</tspan><tspan x="0" dy="0" y="7.73943661971831">Removal</tspan></text></g><g transform="translate(0,9.985915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(107, 174, 214);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Data Destruction</tspan></text></g><g transform="translate(0,19.971830985915492)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: rgb(107, 174, 214);"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Data Encrypted for</tspan><tspan x="0" dy="0" y="7.73943661971831">Impact</tspan></text></g><g transform="translate(0,29.95774647887324)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Defacement</tspan></text></g><g transform="translate(0,39.943661971830984)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Disk Content Wipe</tspan></text></g><g transform="translate(0,49.92957746478873)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Disk Structure Wipe</tspan></text></g><g transform="translate(0,59.91549295774648)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Endpoint Denial of</tspan><tspan x="0" dy="0" y="7.73943661971831">Service</tspan></text></g><g transform="translate(0,69.90140845070422)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Firmware Corruption</tspan></text></g><g transform="translate(0,79.88732394366197)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Inhibit System</tspan><tspan x="0" dy="0" y="7.73943661971831">Recovery</tspan></text></g><g transform="translate(0,89.87323943661971)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Network Denial of</tspan><tspan x="0" dy="0" y="7.73943661971831">Service</tspan></text></g><g transform="translate(0,99.85915492957746)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Resource Hijacking</tspan></text></g><g transform="translate(0,109.8450704225352)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Runtime Data</tspan><tspan x="0" dy="0" y="7.73943661971831">Manipulation</tspan></text></g><g transform="translate(0,119.83098591549296)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="5.492957746478873">Service Stop</tspan></text></g><g transform="translate(0,129.8169014084507)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Stored Data</tspan><tspan x="0" dy="0" y="7.73943661971831">Manipulation</tspan></text></g><g transform="translate(0,139.80281690140845)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">System</tspan><tspan x="0" dy="0" y="7.73943661971831">Shutdown/Reboot</tspan></text></g><g transform="translate(0,149.78873239436618)"><rect width="87.16666666666667" height="9.985915492957746" style="stroke: rgb(0, 0, 0); fill: white;"/><text style="fill: black;" font-size="5pt" transform="translate(3, 2)" dx="0" dy="0"><tspan x="0" dy="0" y="3.2464788732394365">Transmitted Data</tspan><tspan x="0" dy="0" y="7.73943661971831">Manipulation</tspan></text></g></g></g></g></g></svg>