explainx.ainewsletter3.4k
tag

process-creation▌

1 indexed skills · max 10 per page

skills (1)

hunting-for-lateral-movement-via-wmi

mukul975/Anthropic-Cybersecurity-Skills · hunting-for-lateral-movement-via-wmi

0

Detect WMI-based lateral movement by analyzing Windows Event ID 4688 process creation and Sysmon Event ID 1 for WmiPrvSE.exe child process patterns, remote process execution, and WMI event subscription persistence.