GreenBlood WMIC UUID Enumeration for Victim Fingerprinting
Detects the use of WMIC to query for the system's UUID. This activity is often performed by adversaries during the discovery phase to gather system information.
Microsoft Sentinel (KQL)

Detects the use of WMIC to query for the system's UUID. This activity is often performed by adversaries during the discovery phase to gather system information.

Already have an account?