WMI Persistence

심각도 보통 Sigma 탐지 룰. Detects suspicious WMI event filter and command line event consumer based on WMI and Security Logs.

작성자: Florian Roth (Nextron Systems), Gleb Sukhodolskiy, Timur Zinniatullin oscd.community · 원본 라이선스: DRL 1.1 · SigmaHQ 원본