-
Notifications
You must be signed in to change notification settings - Fork 25
WMIC
Pradyumna Joshi edited this page Oct 28, 2019
·
2 revisions
- WMIC for incident response - https://digital-forensics.sans.org/blog/2010/06/04/wmic-draft/
- There is something about WMI - https://www.sans.org/summit-archives/file/summit-archive-1492184420.pdf
- Commandline malware and forensics - https://resources.infosecinstitute.com/commandline-malware-and-forensics/#gref
- https://ss64.com/nt/wmic.html
- https://www.jaiminton.com/cheatsheet/DFIR/#file-and-directories-with-no-usergroup-name
- https://www.andreafortuna.org/2017/08/03/windows-command-line-cheatsheet-part-1-some-useful-tips/
- https://www.andreafortuna.org/2017/08/09/windows-command-line-cheatsheet-part-2-wmic/