TG-3390 actors have deployed the OwaAuth web shell to Exchange servers, disguising it as an ISAPI filter
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: TG-3390 actors have deployed the OwaAuth web shell to Exchange servers, disguising it as an ISAPI filter ### Response: T1505.003.