Source: MITRE_ATTCK
Threat actor: APT28
Affected sector: Unknown
Attack vector: Malware Infection
Severity: High
Confidence: High
MITRE ATT&CK techniques: T1078,T1110,T1003
Description:
MITRE ATT&CK mapping: APT28 utilizes tool 'Wevtutil'. [Wevtutil](https://attack.mitre.org/software/S0645) is a Windows command-line utility that enables administrators to retrieve information about event logs and publishers.(Citation: Wevtutil Microsoft ...