techdoc_lite-deliverables-numbered option.dotx

MITRE's APT3 Adversary Emulation Plan documents the tactics, techniques, and procedures used by the APT3 (Gothic Panda) threat group—covering initial access (spearphishing, browser/Flash/Windows exploits), implant C2 behaviors, credential theft (pwdump, Mimikatz, LaZagne, browser password tools), lateral movement (RemoteCMD, SMB, PsExec), persistence techniques, and exfiltration (WinRAR archives over HTTPS/SSL)—and provides mapping to ATT&CK and practical emulation guidance for red teams and defenders.