Potential Unquoted Service Path Reconnaissance Via Wmic.EXE — Detection Rule
Detects known WMI recon method to look for unquoted service paths using wmic. Often used by pentester and attacker enumeration scripts
Detects known WMI recon method to look for unquoted service paths using wmic. Often used by pentester and attacker enumeration scripts