Can I read DEFCON 23 WMI Attacks Defense Forensics on EtoBox?

DEFCON 23 WMI Attacks Defense Forensics by Cralsec Sec is a document available to read on EtoBox.

What is DEFCON 23 WMI Attacks Defense Forensics about?

This talk discusses Windows Management Instrumentation (WMI) attacks, defense techniques, and forensic analysis. It provides background on WMI and how attackers have used it. The talk covers WMI architecture, querying, eventing, and remote access. It also discusses file formats, investigations, detection, and mitigations.

Author

Cralsec Sec

Language

EN