accessactivityaiamcacheanalysisartifactsattacksautorunsbambashblumiracareercasecloudcontrolcorecroncsacvsscyberdatadaydfirdfspdirectoriesdirectoryeventsevtxexecutefastfetchfilefilelessfilesfluxforensicsgroupshiddenhostinfinvestigationkerberoslaterallifecyclelinuxlisteninglocationslogsmacmaliciousmalwaremasqueradingmftmmmovementnestednetworkpersistencepoisoningportspowershellprefetchprocessprocessespsexecransomwareredregistryresponserevisitedrootsecuresecurityserviceservicesshareshellbagsshimcachespoliationsrumsshstartupstudysumurisvchosttalktaskersthreatstoptrainingtriageunlockingurluserassistwerfaultwincorewindows