Potential Remote WMI ActiveScriptEventConsumers Activity — Detection Rule
Detect potential adversaries leveraging WMI ActiveScriptEventConsumers remotely to move laterally in a network. This event is best correlated and used as an enrichment to determine the potential lateral movement activity.