Detects the execution of WMIC in order to get a list of firewall and antivirus products
Read the full analysis on IntelFusions