Initial Access
T1192 html_urls: HTML-document downloads a file
Other
suspicious_pdf_link: PDF file with suspicious hyperlink or content
suspicious_pdf: PDF file with suspicious content
pdf_page: Contains only one page
pdf_compressed_stream: Contains an object with compressed stream
office_links: Office file contains external links
internet_unavailable: Internet unavailable