SANS - "Investigating WMI Attacks"
WMI as an attack vector is not new. It has been used to aid attacks within Microsoft networks since its invention. However, it has been increasingly weaponized in recent years, largely due to its small forensic footprint. In a world of greater enterprise visibility and advanced endpoint protection, blending in using native tools is … Continue reading Investigating WMI Attacks
from SANS Digital Forensics and Incident Response Blog http://digital-forensics.sans.org/blog/2019/02/09/investigating-wmi-attacks
from SANS Digital Forensics and Incident Response Blog http://digital-forensics.sans.org/blog/2019/02/09/investigating-wmi-attacks
Comments
Post a Comment