GigaWiper WMI Disk Drive Enumeration via FindWindowsDrive Logic

Duo Tech@duotech

•updated Jul 21, 2026•0•0•1

Detects WMI queries targeting Win32_DiskDrive or references to physical drives, a technique used by the GigaWiper malware for disk enumeration prior to destructive actions.