Computer System Reconnaissance Via Wmic.EXE

SigmaHQ Detections@sigmaHQ

•updated Jun 24, 2026•0•0•0

Detects execution of wmic utility with the "computersystem" flag in order to obtain information about the machine such as the domain, username, model, etc.