WMIC Process Creation

nomit vyas@xoxo

•updated Apr 30, 2026•3•0•55

Detects the use of wmic.exe to create a new process. This can be indicative of an adversary using WMI for execution.