Explore Windows Management Instrumentation (WMI) abuse detection in this 28-minute cybersecurity video featuring experts Jamie Williams from MITRE ATT&CK® and Christopher Glyer from Microsoft. Discover how adversaries leverage WMI for persistence, examine real-world examples of malicious WMI usage, and learn effective defensive strategies against these threats. Gain valuable insights into threat detection techniques specifically focused on WMI persistence mechanisms, while benefiting from the extensive knowledge shared by industry experts in this 2021 recording from The Detection Series.
Overview
Syllabus
The Detection Series: Windows Management Instrumentation (Part 1) | Red Canary
Taught by
Red Canary
Related Courses
-
Volt Typhoon: T1059.003 Command and Scripting Interpreter Detection
-
Match Legitimate Name or Location and Data Encrypted for Impact
-
Server Software Component and Clear Command History
-
MITRE ATT&CK Defender™ ATT&CK® Threat Hunting
-
Application Shimming and Data from Local System
-
Application of the MITRE ATT&CK Framework
