has used the KernelCallbackTable to hijack the execution flow of a process by replacing the __fnDWORD function with the address of a created  stub routine.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: has used the KernelCallbackTable to hijack the execution flow of a process by replacing the __fnDWORD function with the address of a created  stub routine. ### Response: T1574.013.