WMI Persistence - Command Line Event Consumer — Detection Rule

Detects WMI command line event consumers

Read the full analysis on IntelFusions