Windows Hotfix Updates Reconnaissance Via Wmic.EXE

심각도 보통 Sigma 탐지 룰. Detects the execution of wmic with the "qfe" flag in order to obtain information about installed hotfix updates on the system. This is often…

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본