Detecting Malicious WMI Tradecraft with Microsoft Defender - Part 2
Red Canary via YouTube
Overview
Learn to detect and investigate malicious Windows Management Instrumentation (WMI) activities in this 53-minute security webinar from Red Canary's Detection Series. Explore advanced threat detection techniques focused on identifying suspicious WMI tradecraft used for lateral movement attacks, with hands-on demonstrations using Microsoft Defender for Endpoint. Gain practical knowledge about monitoring WMI-based threats, understanding attacker methodologies, and implementing effective detection strategies to protect enterprise environments. Master the essential skills needed to investigate and respond to WMI-based security incidents through real-world examples and expert guidance from Red Canary's security professionals.
Syllabus
The Detection Series: Windows Management Instrumentation (Part 2) | Red Canary
Taught by
Red Canary