‣

‣

the set of tools and techniques that attackers use to persist and maintain communication with compromised devices following initial exploitation.

covenant-kbx start

Creating a micro

After compromise enumeration

Creating a stager

Listener

double hop problem

kerberoast

DCSync