ChangeDefault FileAssociation,SystemInformationDiscovery,GraphicalUserInterface,InputPrompt,ExploitationforCredentialAccess,ConnectionProxy,ApplicationWindowDiscovery,Hooking,ProcessHollowing,Supply ChainCompromise,SpearphishingLink,ScheduledTask,RemoteServices,SpaceafterFilename,Multi-StageChannels,ExploitationforPrivilegeEscalation,Data fromRemovableMedia,BinaryPadding,Rc.common,WindowsRemoteManagement,Launchctl,AccountManipulation,PlistModification,MultibandCommunication,RemoteFileCopy,PathInterception,SecuritySupportProvider,InstallUtil,Rootkit,IndicatorRemovalon Host,Regsvcs/Regasm,DLLSearchOrderHijacking,TrustedRelationship,MultilayerEncryption,LogonScripts,InputCapture,ExfiltrationOverAlternativeProtocol,SystemOwner/UserDiscovery,Spearphishingvia Service,Re-openedApplications,Exploitationof RemoteServices,SpearphishingAttachment,NetshHelperDLL,SystemNetworkConnectionsDiscovery,ShortcutModification,FileDeletion,Scripting,SystemTimeDiscovery,NetworkSniffing,SystemFirmware,FallbackChannels,ExternalRemoteServices,ComponentFirmware,Local JobScheduling,Command-LineInterface,HiddenWindow,SID-HistoryInjection,BypassUserAccountControl,Exploitationfor ClientExecution,AudioCapture,Timestomp,File andDirectoryDiscovery,AuthenticationPackage,DynamicDataExchange,SignedScriptProxyExecution,ScreenCapture,ExecutionthroughModuleLoad,Data fromLocalSystem,ScheduledTransfer,AppInitDLLs,ProcessInjection,File SystemPermissionsWeakness,HiddenUsers,BrowserExtensions,InstallRootCertificate,DistributedComponentObjectModel,CommonlyUsed Port,Multi-hopProxy,NetworkShareConnectionRemoval,Exploitationfor DefenseEvasion,Sudo,Keychain,BashHistory,Kerberoasting,Source,Screensaver,Credentialsin Files,KernelModulesandExtensions,CommunicationThroughRemovableMedia,AppleScript,Man intheBrowser,Credentialsin Registry,SystemServiceDiscovery,Mshta,Rundll32,ExecutionthroughAPI,ControlPanelItems,WebService,DataEncrypted,SetuidandSetgid,CMSTP,PortMonitors,StartupItems,ApplicationDeploymentSoftware,HardwareAdditions,NewService,LC_MAINHijacking,ExfiltrationOver OtherNetworkMedium,QueryRegistry,Data fromNetworkSharedDrive,ClearCommandHistory,WindowsAdminShares,SignedBinaryProxyExecution,IndicatorRemovalfromTools,LSASSDriver,HiddenFiles andDirectories,ExfiltrationOverCommandand ControlChannel,RemoteAccessTools,CodeSigning,Masquerading,AutomatedCollection,WindowsManagementInstrumentation,SystemNetworkConfigurationDiscovery,TrustedDeveloperUtilities,ClipboardData,EmailCollection,DataEncoding,NetworkShareDiscovery,ExploitPublic-FacingApplication,SecuritydMemory,ServiceExecution,DisablingSecurityTools,DomainFronting,AccessibilityFeatures,Hypervisor,SSHHijacking,ExtraWindowMemoryInjection,LC_LOAD_DYLIBAddition,ValidAccounts,BrowserBookmarkDiscovery,Drive-byCompromise,DataObfuscation,AppCertDLLs,LLMNR/NBT-NSPoisoning,StandardApplicationLayerProtocol,WinlogonHelperDLL,Two-FactorAuthenticationInterception,FileSystemLogicalOffsets,Bootkit,DylibHijacking,OfficeApplicationStartup,PeripheralDeviceDiscovery,SudoCaching,CreateAccount,CredentialDumping,RegistryRun Keys/ StartFolder,UserExecution,Regsvr32,TimeProviders,StandardNon-ApplicationLayerProtocol,NetworkServiceScanning,AccessTokenManipulation,ForcedAuthentication,ProcessDoppelgänging,AutomatedExfiltration,SoftwarePacking,ModifyExistingService,PortKnocking,Deobfuscate/DecodeFiles or Information,GatekeeperBypass,HISTCONTROL,LaunchDaemon,PasstheHash,PasswordPolicyDiscovery,PermissionGroupsDiscovery,PasswordFilterDLL,WindowsManagementInstrumentationEventSubscription,ObfuscatedFiles orInformation,DataTransferSizeLimits,WebShell,ExfiltrationOverPhysicalMedium,PrivateKeys,LoginItem,BITSJobs,DCShadow,ProcessDiscovery,DLLSide-Loading,ModifyRegistry,SharedWebroot,BruteForce,LaunchAgent,ServiceRegistryPermissionsWeakness,RedundantAccess,TaintSharedContent,DataStaged,NTFS FileAttributes,Trap,RemoteDesktopProtocol,Third-partySoftware,PasstheTicket,DataCompressed,ApplicationShimming,VideoCapture,CustomCryptographicProtocol,UncommonlyUsed Port,SIP andTrustProviderHijacking,Image FileExecutionOptionsInjection,Data fromInformationRepositories,ReplicationThroughRemovableMedia,PowerShell,IndirectCommandExecution,SecuritySoftwareDiscovery,RemoteSystemDiscovery,CustomCommandand ControlProtocol,.bash_profileand .bashrc,IndicatorBlocking,ComponentObjectModelHijacking,StandardCryptographicProtocol,AccountDiscovery,ChangeDefault FileAssociation,SystemInformationDiscovery,GraphicalUserInterface,InputPrompt,ExploitationforCredentialAccess,ConnectionProxy,ApplicationWindowDiscovery,Hooking,ProcessHollowing,Supply ChainCompromise,SpearphishingLink,ScheduledTask,RemoteServices,SpaceafterFilename,Multi-StageChannels,ExploitationforPrivilegeEscalation,Data fromRemovableMedia,BinaryPadding,Rc.common,WindowsRemoteManagement,Launchctl,AccountManipulation,PlistModification,MultibandCommunication,RemoteFileCopy,PathInterception,SecuritySupportProvider,InstallUtil,Rootkit,IndicatorRemovalon Host,Regsvcs/Regasm,DLLSearchOrderHijacking,TrustedRelationship,MultilayerEncryption,LogonScripts,InputCapture,ExfiltrationOverAlternativeProtocol,SystemOwner/UserDiscovery,Spearphishingvia Service,Re-openedApplications,Exploitationof RemoteServices,SpearphishingAttachment,NetshHelperDLL,SystemNetworkConnectionsDiscovery,ShortcutModification,FileDeletion,Scripting,SystemTimeDiscovery,NetworkSniffing,SystemFirmware,FallbackChannels,ExternalRemoteServices,ComponentFirmware,Local JobScheduling,Command-LineInterface,HiddenWindow,SID-HistoryInjection,BypassUserAccountControl,Exploitationfor ClientExecution,AudioCapture,Timestomp,File andDirectoryDiscovery,AuthenticationPackage,DynamicDataExchange,SignedScriptProxyExecution,ScreenCapture,ExecutionthroughModuleLoad,Data fromLocalSystem,ScheduledTransfer,AppInitDLLs,ProcessInjection,File SystemPermissionsWeakness,HiddenUsers,BrowserExtensions,InstallRootCertificate,DistributedComponentObjectModel,CommonlyUsed Port,Multi-hopProxy,NetworkShareConnectionRemoval,Exploitationfor DefenseEvasion,Sudo,Keychain,BashHistory,Kerberoasting,Source,Screensaver,Credentialsin Files,KernelModulesandExtensions,CommunicationThroughRemovableMedia,AppleScript,Man intheBrowser,Credentialsin Registry,SystemServiceDiscovery,Mshta,Rundll32,ExecutionthroughAPI,ControlPanelItems,WebService,DataEncrypted,SetuidandSetgid,CMSTP,PortMonitors,StartupItems,ApplicationDeploymentSoftware,HardwareAdditions,NewService,LC_MAINHijacking,ExfiltrationOver OtherNetworkMedium,QueryRegistry,Data fromNetworkSharedDrive,ClearCommandHistory,WindowsAdminShares,SignedBinaryProxyExecution,IndicatorRemovalfromTools,LSASSDriver,HiddenFiles andDirectories,ExfiltrationOverCommandand ControlChannel,RemoteAccessTools,CodeSigning,Masquerading,AutomatedCollection,WindowsManagementInstrumentation,SystemNetworkConfigurationDiscovery,TrustedDeveloperUtilities,ClipboardData,EmailCollection,DataEncoding,NetworkShareDiscovery,ExploitPublic-FacingApplication,SecuritydMemory,ServiceExecution,DisablingSecurityTools,DomainFronting,AccessibilityFeatures,Hypervisor,SSHHijacking,ExtraWindowMemoryInjection,LC_LOAD_DYLIBAddition,ValidAccounts,BrowserBookmarkDiscovery,Drive-byCompromise,DataObfuscation,AppCertDLLs,LLMNR/NBT-NSPoisoning,StandardApplicationLayerProtocol,WinlogonHelperDLL,Two-FactorAuthenticationInterception,FileSystemLogicalOffsets,Bootkit,DylibHijacking,OfficeApplicationStartup,PeripheralDeviceDiscovery,SudoCaching,CreateAccount,CredentialDumping,RegistryRun Keys/ StartFolder,UserExecution,Regsvr32,TimeProviders,StandardNon-ApplicationLayerProtocol,NetworkServiceScanning,AccessTokenManipulation,ForcedAuthentication,ProcessDoppelgänging,AutomatedExfiltration,SoftwarePacking,ModifyExistingService,PortKnocking,Deobfuscate/DecodeFiles or Information,GatekeeperBypass,HISTCONTROL,LaunchDaemon,PasstheHash,PasswordPolicyDiscovery,PermissionGroupsDiscovery,PasswordFilterDLL,WindowsManagementInstrumentationEventSubscription,ObfuscatedFiles orInformation,DataTransferSizeLimits,WebShell,ExfiltrationOverPhysicalMedium,PrivateKeys,LoginItem,BITSJobs,DCShadow,ProcessDiscovery,DLLSide-Loading,ModifyRegistry,SharedWebroot,BruteForce,LaunchAgent,ServiceRegistryPermissionsWeakness,RedundantAccess,TaintSharedContent,DataStaged,NTFS FileAttributes,Trap,RemoteDesktopProtocol,Third-partySoftware,PasstheTicket,DataCompressed,ApplicationShimming,VideoCapture,CustomCryptographicProtocol,UncommonlyUsed Port,SIP andTrustProviderHijacking,Image FileExecutionOptionsInjection,Data fromInformationRepositories,ReplicationThroughRemovableMedia,PowerShell,IndirectCommandExecution,SecuritySoftwareDiscovery,RemoteSystemDiscovery,CustomCommandand ControlProtocol,.bash_profileand .bashrc,IndicatorBlocking,ComponentObjectModelHijacking,StandardCryptographicProtocol,AccountDiscovery,

Untitled Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
  1. Change Default File Association,
  2. System Information Discovery,
  3. Graphical User Interface,
  4. Input Prompt,
  5. Exploitation for Credential Access,
  6. Connection Proxy,
  7. Application Window Discovery,
  8. Hooking,
  9. Process Hollowing,
  10. Supply Chain Compromise,
  11. Spearphishing Link,
  12. Scheduled Task,
  13. Remote Services,
  14. Space after Filename,
  15. Multi-Stage Channels,
  16. Exploitation for Privilege Escalation,
  17. Data from Removable Media,
  18. Binary Padding,
  19. Rc.common,
  20. Windows Remote Management,
  21. Launchctl,
  22. Account Manipulation,
  23. Plist Modification,
  24. Multiband Communication,
  25. Remote File Copy,
  26. Path Interception,
  27. Security Support Provider,
  28. InstallUtil,
  29. Rootkit,
  30. Indicator Removal on Host,
  31. Regsvcs/Regasm,
  32. DLL Search Order Hijacking,
  33. Trusted Relationship,
  34. Multilayer Encryption,
  35. Logon Scripts,
  36. Input Capture,
  37. Exfiltration Over Alternative Protocol,
  38. System Owner/User Discovery,
  39. Spearphishing via Service,
  40. Re-opened Applications,
  41. Exploitation of Remote Services,
  42. Spearphishing Attachment,
  43. Netsh Helper DLL,
  44. System Network Connections Discovery,
  45. Shortcut Modification,
  46. File Deletion,
  47. Scripting,
  48. System Time Discovery,
  49. Network Sniffing,
  50. System Firmware,
  51. Fallback Channels,
  52. External Remote Services,
  53. Component Firmware,
  54. Local Job Scheduling,
  55. Command-Line Interface,
  56. Hidden Window,
  57. SID-History Injection,
  58. Bypass User Account Control,
  59. Exploitation for Client Execution,
  60. Audio Capture,
  61. Timestomp,
  62. File and Directory Discovery,
  63. Authentication Package,
  64. Dynamic Data Exchange,
  65. Signed Script Proxy Execution,
  66. Screen Capture,
  67. Execution through Module Load,
  68. Data from Local System,
  69. Scheduled Transfer,
  70. AppInit DLLs,
  71. Process Injection,
  72. File System Permissions Weakness,
  73. Hidden Users,
  74. Browser Extensions,
  75. Install Root Certificate,
  76. Distributed Component Object Model,
  77. Commonly Used Port,
  78. Multi-hop Proxy,
  79. Network Share Connection Removal,
  80. Exploitation for Defense Evasion,
  81. Sudo,
  82. Keychain,
  83. Bash History,
  84. Kerberoasting,
  85. Source,
  86. Screensaver,
  87. Credentials in Files,
  88. Kernel Modules and Extensions,
  89. Communication Through Removable Media,
  90. AppleScript,
  91. Man in the Browser,
  92. Credentials in Registry,
  93. System Service Discovery,
  94. Mshta,
  95. Rundll32,
  96. Execution through API,
  97. Control Panel Items,
  98. Web Service,
  99. Data Encrypted,
  100. Setuid and Setgid,
  101. CMSTP,
  102. Port Monitors,
  103. Startup Items,
  104. Application Deployment Software,
  105. Hardware Additions,
  106. New Service,
  107. LC_MAIN Hijacking,
  108. Exfiltration Over Other Network Medium,
  109. Query Registry,
  110. Data from Network Shared Drive,
  111. Clear Command History,
  112. Windows Admin Shares,
  113. Signed Binary Proxy Execution,
  114. Indicator Removal from Tools,
  115. LSASS Driver,
  116. Hidden Files and Directories,
  117. Exfiltration Over Command and Control Channel,
  118. Remote Access Tools,
  119. Code Signing,
  120. Masquerading,
  121. Automated Collection,
  122. Windows Management Instrumentation,
  123. System Network Configuration Discovery,
  124. Trusted Developer Utilities,
  125. Clipboard Data,
  126. Email Collection,
  127. Data Encoding,
  128. Network Share Discovery,
  129. Exploit Public-Facing Application,
  130. Securityd Memory,
  131. Service Execution,
  132. Disabling Security Tools,
  133. Domain Fronting,
  134. Accessibility Features,
  135. Hypervisor,
  136. SSH Hijacking,
  137. Extra Window Memory Injection,
  138. LC_LOAD_DYLIB Addition,
  139. Valid Accounts,
  140. Browser Bookmark Discovery,
  141. Drive-by Compromise,
  142. Data Obfuscation,
  143. AppCert DLLs,
  144. LLMNR/NBT-NS Poisoning,
  145. Standard Application Layer Protocol,
  146. Winlogon Helper DLL,
  147. Two-Factor Authentication Interception,
  148. File System Logical Offsets,
  149. Bootkit,
  150. Dylib Hijacking,
  151. Office Application Startup,
  152. Peripheral Device Discovery,
  153. Sudo Caching,
  154. Create Account,
  155. Credential Dumping,
  156. Registry Run Keys / Start Folder,
  157. User Execution,
  158. Regsvr32,
  159. Time Providers,
  160. Standard Non-Application Layer Protocol,
  161. Network Service Scanning,
  162. Access Token Manipulation,
  163. Forced Authentication,
  164. Process Doppelgänging,
  165. Automated Exfiltration,
  166. Software Packing,
  167. Modify Existing Service,
  168. Port Knocking,
  169. Deobfuscate/Decode Files or Information,
  170. Gatekeeper Bypass,
  171. HISTCONTROL,
  172. Launch Daemon,
  173. Pass the Hash,
  174. Password Policy Discovery,
  175. Permission Groups Discovery,
  176. Password Filter DLL,
  177. Windows Management Instrumentation Event Subscription,
  178. Obfuscated Files or Information,
  179. Data Transfer Size Limits,
  180. Web Shell,
  181. Exfiltration Over Physical Medium,
  182. Private Keys,
  183. Login Item,
  184. BITS Jobs,
  185. DCShadow,
  186. Process Discovery,
  187. DLL Side-Loading,
  188. Modify Registry,
  189. Shared Webroot,
  190. Brute Force,
  191. Launch Agent,
  192. Service Registry Permissions Weakness,
  193. Redundant Access,
  194. Taint Shared Content,
  195. Data Staged,
  196. NTFS File Attributes,
  197. Trap,
  198. Remote Desktop Protocol,
  199. Third-party Software,
  200. Pass the Ticket,
  201. Data Compressed,
  202. Application Shimming,
  203. Video Capture,
  204. Custom Cryptographic Protocol,
  205. Uncommonly Used Port,
  206. SIP and Trust Provider Hijacking,
  207. Image File Execution Options Injection,
  208. Data from Information Repositories,
  209. Replication Through Removable Media,
  210. PowerShell,
  211. Indirect Command Execution,
  212. Security Software Discovery,
  213. Remote System Discovery,
  214. Custom Command and Control Protocol,
  215. .bash_profile and .bashrc,
  216. Indicator Blocking,
  217. Component Object Model Hijacking,
  218. Standard Cryptographic Protocol,
  219. Account Discovery,