Hardware Model Reconnaissance Via Wmic.EXE

심각도 보통 Sigma 탐지 룰. Detects the execution of WMIC with the "csproduct" which is used to obtain information such as hardware models and vendor information

작성자: Florian Roth (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본