WBEM
Web-Based Enterprise Management (WBEM)
- 2 paths
- Version 1
- Mark Hallman
Paths on disk
2 paths
References
4 links
- jaiminton.com/cheatsheet/DFIR/(opens in new tab)
- sans.org/blog/investigating-wmi-attacks(opens in new tab)
- fireeye.com/blog/threat-research/2016/12/do_you_see_what_icc.html(opens in new tab)
- cyberforensicator.com/2019/07/13/using-mitre-attck-for-forensics-wmi-event-subscription-t1084/(opens in new tab)