Answers

How many phases does APT3 Emulation Plan consists of? 3

Under Persistence, what binary was replaced with cmd.exe? sethc.exe

Examining APT29, what 2 tools were used to execute the first scenario? Pupy and Meterpreter

What tool was used to execute the second scenario? PoshC2

Where can you find step-by-step instructions to execute both scenarios?