accessactivityaiamcacheanalysisartifactsattacksautorunsbambashblumiracareercasecloudcontrolcorecroncsacvsscyberdatadaydfirdfspdirectoriesdirectoryeventsevtxexecutefastfetchfilefilelessfilesfluxforensicsgroupshiddenhostinfinvestigationkerberoslaterallifecyclelinuxlisteninglocationslogsmacmaliciousmalwaremasqueradingmftmmmovementnestednetworkpersistencepoisoningportspowershellprefetchprocessprocessespsexecransomwareredregistryresponserevisitedrootsecuresecurityserviceservicesshareshellbagsshimcachespoliationsrumsshstartupstudysumurisvchosttalktaskersthreatstrainingtriageunlockingurluserassistwerfaultwincorewindows