Packet capture Windows command prompt, ODBCCONF execution dll, Windows Registry Persistence - COM key linking
silenttrinity_stage_ use, sysmon_mimikatz_сreds_dump, sysmon_registry_persistence_key_linking, sysmon_сreds_dump