In cyber operations we use a few different frameworks to document threat activities. In the most comprehensive and widely acknowledged framework, Mitre Att&ck$,$ select the stage associated with malicious code running in memory.