Network Logon Script - T1037.003

        graph LR;

     T1037003["Network Logon Script"] --> |modifies| NetworkInitScriptFileResource["Network Init Script File Resource"]; class T1037003 OffensiveTechniqueNode;
        class NetworkInitScriptFileResource ArtifactNode; click NetworkInitScriptFileResource href "/dao/artifact/d3f:NetworkInitScriptFileResource";
        click T1037003 href "/offensive-technique/attack/T1037.003/"; click NetworkInitScriptFileResource href "/dao/artifact/d3f:NetworkInitScriptFileResource";             DynamicAnalysis["Dynamic Analysis"] -->
          | analyzes | NetworkInitScriptFileResource["Network Init Script File Resource"];

          DynamicAnalysis["Dynamic Analysis"] -.->
            | may-detect | T1037003["Network Logon Script"] ;
          class DynamicAnalysis DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click DynamicAnalysis href "/technique/d3f:DynamicAnalysis"; EmulatedFileAnalysis["Emulated File Analysis"] -->
          | analyzes | NetworkInitScriptFileResource["Network Init Script File Resource"];

          EmulatedFileAnalysis["Emulated File Analysis"] -.->
            | may-detect | T1037003["Network Logon Script"] ;
          class EmulatedFileAnalysis DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click EmulatedFileAnalysis href "/technique/d3f:EmulatedFileAnalysis"; DecoyFile["Decoy File"] -->
          | spoofs | NetworkInitScriptFileResource["Network Init Script File Resource"];

          DecoyFile["Decoy File"] -.->
            | may-deceive | T1037003["Network Logon Script"] ;
          class DecoyFile DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click DecoyFile href "/technique/d3f:DecoyFile";                                        DecoyNetworkResource["Decoy Network Resource"] -->
          | spoofs | NetworkInitScriptFileResource["Network Init Script File Resource"];

          DecoyNetworkResource["Decoy Network Resource"] -.->
            | may-deceive | T1037003["Network Logon Script"] ;
          class DecoyNetworkResource DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click DecoyNetworkResource href "/technique/d3f:DecoyNetworkResource"; FileEncryption["File Encryption"] -->
          | encrypts | NetworkInitScriptFileResource["Network Init Script File Resource"];

          FileEncryption["File Encryption"] -.->
            | may-harden | T1037003["Network Logon Script"] ;
          class FileEncryption DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click FileEncryption href "/technique/d3f:FileEncryption";                           FileIntegrityMonitoring["File Integrity Monitoring"] -->
          | analyzes | NetworkInitScriptFileResource["Network Init Script File Resource"];

          FileIntegrityMonitoring["File Integrity Monitoring"] -.->
            | may-detect | T1037003["Network Logon Script"] ;
          class FileIntegrityMonitoring DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click FileIntegrityMonitoring href "/technique/d3f:FileIntegrityMonitoring"; FileEviction["File Eviction"] -->
          | deletes | NetworkInitScriptFileResource["Network Init Script File Resource"];

          FileEviction["File Eviction"] -.->
            | may-evict | T1037003["Network Logon Script"] ;
          class FileEviction DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click FileEviction href "/technique/d3f:FileEviction";                           ExecutableDenylisting["Executable Denylisting"] -->
          | blocks | NetworkInitScriptFileResource["Network Init Script File Resource"];

          ExecutableDenylisting["Executable Denylisting"] -.->
            | may-isolate | T1037003["Network Logon Script"] ;
          class ExecutableDenylisting DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click ExecutableDenylisting href "/technique/d3f:ExecutableDenylisting"; ExecutableAllowlisting["Executable Allowlisting"] -->
          | blocks | NetworkInitScriptFileResource["Network Init Script File Resource"];

          ExecutableAllowlisting["Executable Allowlisting"] -.->
            | may-isolate | T1037003["Network Logon Script"] ;
          class ExecutableAllowlisting DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click ExecutableAllowlisting href "/technique/d3f:ExecutableAllowlisting";                           NetworkResourceAccessMediation["Network Resource Access Mediation"] -->
          | isolates | NetworkInitScriptFileResource["Network Init Script File Resource"];

          NetworkResourceAccessMediation["Network Resource Access Mediation"] -.->
            | may-isolate | T1037003["Network Logon Script"] ;
          class NetworkResourceAccessMediation DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click NetworkResourceAccessMediation href "/technique/d3f:NetworkResourceAccessMediation";              LocalFilePermissions["Local File Permissions"] -->
          | restricts | NetworkInitScriptFileResource["Network Init Script File Resource"];

          LocalFilePermissions["Local File Permissions"] -.->
            | may-isolate | T1037003["Network Logon Script"] ;
          class LocalFilePermissions DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click LocalFilePermissions href "/technique/d3f:LocalFilePermissions"; RestoreFile["Restore File"] -->
          | restores | NetworkInitScriptFileResource["Network Init Script File Resource"];

          RestoreFile["Restore File"] -.->
            | may-restore | T1037003["Network Logon Script"] ;
          class RestoreFile DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click RestoreFile href "/technique/d3f:RestoreFile";                           RemoteFileAccessMediation["Remote File Access Mediation"] -->
          | isolates | NetworkInitScriptFileResource["Network Init Script File Resource"];

          RemoteFileAccessMediation["Remote File Access Mediation"] -.->
            | may-isolate | T1037003["Network Logon Script"] ;
          class RemoteFileAccessMediation DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click RemoteFileAccessMediation href "/technique/d3f:RemoteFileAccessMediation";              FileAnalysis["File Analysis"] -->
          | analyzes | NetworkInitScriptFileResource["Network Init Script File Resource"];

          FileAnalysis["File Analysis"] -.->
            | may-detect | T1037003["Network Logon Script"] ;
          class FileAnalysis DefensiveTechniqueNode;
          class NetworkInitScriptFileResource ArtifactNode;
          click FileAnalysis href "/technique/d3f:FileAnalysis";