Hardware Model Reconnaissance Via Wmic.EXE — Detection Rule

Detects the execution of WMIC with the "csproduct" which is used to obtain information such as hardware models and vendor information