Uat 7237 Wmi Based Tooling
Detects the execution of WMI-based tooling such as SharpWMI, WMICmd, or wmic.exe for remote command execution, a technique used by the threat actor UAT-7237.
YARA-L
Detects the execution of WMI-based tooling such as SharpWMI, WMICmd, or wmic.exe for remote command execution, a technique used by the threat actor UAT-7237.
Already have an account?