About this document

DEFCON 23 WMI Attacks Defense Forensics by Cralsec Sec is a document available to read on EtoBox.

This talk discusses Windows Management Instrumentation (WMI) attacks, defense techniques, and forensic analysis. It provides background on WMI and how attackers have used it. The talk covers WMI architecture, querying, eventing, and remote access. It also discusses file formats, investigations, detection, and mitigations.

Author

Cralsec Sec

Language

EN