Payload:Add\-Exfiltration* OR Payload:Add\-Persistence* OR Payload:Add\-RegBackdoor* OR Payload:Add\-RemoteRegBackdoor* OR Payload:Add\-ScrnSaveBackdoor* OR Payload:BadSuccessor* OR Payload:Check\-VM* OR Payload:ConvertTo\-Rc4ByteStream* OR Payload:Decrypt\-Hash* OR Payload:Disable\-ADIDNSNode* OR Payload:Disable\-MachineAccount* OR Payload:Do\-Exfiltration* OR Payload:Enable\-ADIDNSNode* OR Payload:Enable\-MachineAccount* OR Payload:Enabled\-DuplicateToken* OR Payload:Exploit\-Jboss* OR Payload:Export\-ADR* OR Payload:Export\-ADRCSV* OR Payload:Export\-ADRExcel* OR Payload:Export\-ADRHTML* OR Payload:Export\-ADRJSON* OR Payload:Export\-ADRXML* OR Payload:Find\-Fruit* OR Payload:Find\-GPOLocation* OR Payload:Find\-TrustedDocuments* OR Payload:Get\-ADIDNS* OR Payload:Get\-ApplicationHost* OR Payload:Get\-ChromeDump* OR Payload:Get\-ClipboardContents* OR Payload:Get\-FoxDump* OR Payload:Get\-GPPPassword* OR Payload:Get\-IndexedItem* OR Payload:Get\-KerberosAESKey* OR Payload:Get\-Keystrokes* OR Payload:Get\-LSASecret* OR Payload:Get\-MachineAccountAttribute* OR Payload:Get\-MachineAccountCreator* OR Payload:Get\-PassHashes* OR Payload:Get\-RegAlwaysInstallElevated* OR Payload:Get\-RegAutoLogon* OR Payload:Get\-RemoteBootKey* OR Payload:Get\-RemoteCachedCredential* OR Payload:Get\-RemoteLocalAccountHash* OR Payload:Get\-RemoteLSAKey* OR Payload:Get\-RemoteMachineAccountHash* OR Payload:Get\-RemoteNLKMKey* OR Payload:Get\-RickAstley* OR Payload:Get\-Screenshot* OR Payload:Get\-SecurityPackages* OR Payload:Get\-ServiceFilePermission* OR Payload:Get\-ServicePermission* OR Payload:Get\-ServiceUnquoted* OR Payload:Get\-SiteListPassword* OR Payload:Get\-System* OR Payload:Get\-TimedScreenshot* OR Payload:Get\-UnattendedInstallFile* OR Payload:Get\-Unconstrained* OR Payload:Get\-USBKeystrokes* OR Payload:Get\-VaultCredential* OR Payload:Get\-VulnAutoRun* OR Payload:Get\-VulnSchTask* OR Payload:Grant\-ADIDNSPermission* OR Payload:Gupt\-Backdoor* OR Payload:HTTP\-Login* OR Payload:Install\-ServiceBinary* OR Payload:Install\-SSP* OR Payload:Invoke\-ACLScanner* OR Payload:Invoke\-ADRecon* OR Payload:Invoke\-ADSBackdoor* OR Payload:Invoke\-AgentSmith* OR Payload:Invoke\-AllChecks* OR Payload:Invoke\-ARPScan* OR Payload:Invoke\-AzureHound* OR Payload:Invoke\-BackdoorLNK* OR Payload:Invoke\-BadPotato* OR Payload:Invoke\-BetterSafetyKatz* OR Payload:Invoke\-BypassUAC* OR Payload:Invoke\-Carbuncle* OR Payload:Invoke\-Certify* OR Payload:Invoke\-ConPtyShell* OR Payload:Invoke\-CredentialInjection* OR Payload:Invoke\-DAFT* OR Payload:Invoke\-DCSync* OR Payload:Invoke\-DinvokeKatz* OR Payload:Invoke\-DllInjection* OR Payload:Invoke\-DNSUpdate* OR Payload:Invoke\-DNSExfiltrator* OR Payload:Invoke\-DomainPasswordSpray* OR Payload:Invoke\-DowngradeAccount* OR Payload:Invoke\-EgressCheck* OR Payload:Invoke\-Eyewitness* OR Payload:Invoke\-FakeLogonScreen* OR Payload:Invoke\-Farmer* OR Payload:Invoke\-Get\-RBCD\-Threaded* OR Payload:Invoke\-Gopher* OR Payload:Invoke\-Grouper* OR Payload:Invoke\-HandleKatz* OR Payload:Invoke\-ImpersonatedProcess* OR Payload:Invoke\-ImpersonateSystem* OR Payload:Invoke\-InteractiveSystemPowerShell* OR Payload:Invoke\-Internalmonologue* OR Payload:Invoke\-Inveigh* OR Payload:Invoke\-InveighRelay* OR Payload:Invoke\-KrbRelay* OR Payload:Invoke\-LdapSignCheck* OR Payload:Invoke\-Lockless* OR Payload:Invoke\-MalSCCM* OR Payload:Invoke\-Mimikatz* OR Payload:Invoke\-Mimikittenz* OR Payload:Invoke\-MITM6* OR Payload:Invoke\-NanoDump* OR Payload:Invoke\-NetRipper* OR Payload:Invoke\-Nightmare* OR Payload:Invoke\-NinjaCopy* OR Payload:Invoke\-OfficeScrape* OR Payload:Invoke\-OxidResolver* OR Payload:Invoke\-P0wnedshell* OR Payload:Invoke\-Paranoia* OR Payload:Invoke\-PortScan* OR Payload:Invoke\-PoshRatHttp* OR Payload:Invoke\-PostExfil* OR Payload:Invoke\-PowerDump* OR Payload:Invoke\-PowerDPAPI* OR Payload:Invoke\-PowerShellTCP* OR Payload:Invoke\-PowerShellWMI* OR Payload:Invoke\-PPLDump* OR Payload:Invoke\-PsExec* OR Payload:Invoke\-PSInject* OR Payload:Invoke\-PsUaCme* OR Payload:Invoke\-ReflectivePEInjection* OR Payload:Invoke\-ReverseDNSLookup* OR Payload:Invoke\-Rubeus* OR Payload:Invoke\-RunAs* OR Payload:Invoke\-SafetyKatz* OR Payload:Invoke\-SauronEye* OR Payload:Invoke\-SCShell* OR Payload:Invoke\-Seatbelt* OR Payload:Invoke\-ServiceAbuse* OR Payload:Invoke\-ShadowSpray* OR Payload:Invoke\-Sharp* OR Payload:Invoke\-Shellcode* OR Payload:Invoke\-SMBScanner* OR Payload:Invoke\-Snaffler* OR Payload:Invoke\-Spoolsample* OR Payload:Invoke\-SpraySinglePassword* OR Payload:Invoke\-SSHCommand* OR Payload:Invoke\-StandIn* OR Payload:Invoke\-StickyNotesExtract* OR Payload:Invoke\-SystemCommand* OR Payload:Invoke\-Tasksbackdoor* OR Payload:Invoke\-Tater* OR Payload:Invoke\-Thunderfox* OR Payload:Invoke\-ThunderStruck* OR Payload:Invoke\-TokenManipulation* OR Payload:Invoke\-Tokenvator* OR Payload:Invoke\-TotalExec* OR Payload:Invoke\-UrbanBishop* OR Payload:Invoke\-UserHunter* OR Payload:Invoke\-VoiceTroll* OR Payload:Invoke\-Whisker* OR Payload:Invoke\-WinEnum* OR Payload:Invoke\-winPEAS* OR Payload:Invoke\-WireTap* OR Payload:Invoke\-WmiCommand* OR Payload:Invoke\-WMIExec* OR Payload:Invoke\-WScriptBypassUAC* OR Payload:Invoke\-Zerologon* OR Payload:MailRaider* OR Payload:New\-ADIDNSNode* OR Payload:New\-DNSRecordArray* OR Payload:New\-HoneyHash* OR Payload:New\-InMemoryModule* OR Payload:New\-MachineAccount* OR Payload:New\-SOASerialNumberArray* OR Payload:Out\-Minidump* OR Payload:Port\-Scan* OR Payload:PowerBreach* OR Payload:powercat\ * OR Payload:PowerUp* OR Payload:PowerView* OR Payload:Remove\-ADIDNSNode* OR Payload:Remove\-MachineAccount* OR Payload:Remove\-Update* OR Payload:Rename\-ADIDNSNode* OR Payload:Revoke\-ADIDNSPermission* OR Payload:Set\-ADIDNSNode* OR Payload:Set\-MacAttribute* OR Payload:Set\-MachineAccountAttribute* OR Payload:Set\-Wallpaper* OR Payload:Show\-TargetScreen* OR Payload:Start\-CaptureServer* OR Payload:Start\-Dnscat2* OR Payload:Start\-WebcamRecorder* OR Payload:Veeam\-Get\-Creds* OR Payload:VolumeShadowCopyTools*