Domain Identification via WMI Win32_ComputerSystem Query
Detects attempts to identify the domain membership of a system using WMI queries to the Win32_ComputerSystem class. This technique is often employed by attackers to gather information about the network environment and potential targets.
Sigma
