Hardware Model Reconnaissance Via Wmic.EXE
Detects the execution of WMIC with the "csproduct" which is used to obtain information such as hardware models and vendor information
Sigma

Detects the execution of WMIC with the "csproduct" which is used to obtain information such as hardware models and vendor information

Already have an account?