T1072 Software Deployment Tools
Adversaries may gain access to and use centralized software suites installed within an enterprise to execute commands and move laterally through the network. MITRE ATT&CK
1 program on CmdID 3 Sigma rules T1072 on attack.mitre.org