On occasions, the phishing emails contained links to external domains to download the first stage, and sometimes the first stage was attached to the email itself
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: On occasions, the phishing emails contained links to external domains to download the first stage, and sometimes the first stage was attached to the email itself ### Response: T1566.002.