Windows management instrumentation, also known as WMI, is an App on Windows that allows a user to query all sorts of things about a system. Being native to Windows, it is an attractive target for a attackers to leverage. This week I'll break down the artifact from a DFIR point of a few and talk about how to detect its misuse.
Comments (3)
More Episodes
All Episodes>>
Get this podcast on your phone, Free
Create Your Podcast In Minutes
- Full-featured podcast site
- Unlimited storage and bandwidth
- Comprehensive podcast stats
- Distribute to Apple Podcasts, Spotify, and more
- Make money with your podcast
It is Free
