| Risk | Consequence | |------|-------------| | Undocumented binary modifications | Silent data exfiltration | | Dropping of svchost.exe or lsass.exe mimicry | Persistent backdoor | | Modifying local firewall rules | Disabling endpoint protection | | Adding scheduled tasks | Ransomware staging | | Targeting backup software first | Bypassing recovery |
: Facilitates network-based image distribution to multiple machines simultaneously.