value:  Threat actors can use GPOs (virtual collection of policy settings) to force infect machines to connect to command and control (C2) IPs, domains, or servers for further malicious activity. 
name: Domain Policy Modification: Group Policy Modification