Hacktricks 179 Best Guide
Evasion of EDR by disabling services (requires privilege) - Stop or modify EDR services; high blast radius and noisy.
Attacking Docker images on registries - Pull images to inspect layers for embedded keys or secrets. hacktricks 179 best
Attackers may attempt to tear down established BGP sessions by spoofing packets. An Overview of BGP Hijacking - Bishop Fox Evasion of EDR by disabling services (requires privilege)