System Disk And Volume Reconnaissance Via Wmic.EXE

심각도 보통 Sigma 탐지 룰. An adversary might use WMI to discover information about the system, such as the volume name, size, free space, and other disk information. …

작성자: Stephen Lincoln '@slincoln-aiq' (AttackIQ) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본