Successful Account Login Via WMI — Detection Rule

Detects successful logon attempts performed with WMI

Read the full analysis on IntelFusions