The  third stage can use the AdvancedRun.exe tool to execute commands in the context of the Windows TrustedInstaller group via `%TEMP%\AdvancedRun.exe /EXEFilename C:\Windows\System32\sc.exe /WindowState 0 /CommandLine stop WinDefend /StartDirectory /RunAs 8 /Run`.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: The  third stage can use the AdvancedRun.exe tool to execute commands in the context of the Windows TrustedInstaller group via `%TEMP%\AdvancedRun.exe /EXEFilename C:\Windows\System32\sc.exe /WindowState 0 /CommandLine stop WinDefend /StartDirectory /RunAs 8 /Run`. ### Response: T1134.002.