value:  Active Setup components can be utilized by adversaries to force breached or compromised accounts to conduct malicious activity while disguised as a legitimate user. 
name: Boot or Logon Autostart Execution: Active Setup