WMI Attacks and Defense

Download Tutorial WMI Attacks and Defense

Windows Management Instrumentation (WMI) has been used by Windows administrators for various system management operations since Windows NT. As WMI is often used to automate administrative tasks, it is of equal use for attackers as it is for defenders. It is very helpful to understand WMI and its working to be able to fully utilize its power both for Red and Blue teams.

In this training through demonstrations and hands-on, we will discuss how WMI and CIM can be utilized for offensive as well as defensive security. Different utilities like PowerShell built-in cmdlets, PowerShell scripts, native windows tools and Linux tools will be discussed. Various attacks like enumeration and information gathering, lateral movement, persistence, backdoors, modifying security descriptors etc. will be executed by utilizing WMI. We will also discuss how WMI can be used for agentless monitoring, detection of above mentioned attacks and more.

Screenshot Tutorials/Courses

Download Tutorials/Courses

https://drive.google.com/open?id=1NbKtuC5qxHx82TDnyebJ4R9TYwf4lrb4
https://drive.google.com/open?id=1j_q74Z9n9VplLkrX-GJhKkckUlCVDCxw
https://freeshadow-my.sharepoint.com/:u:/g/personal/hoquangdaionline_abcda_tech/EcR32k6KJfBHl3O0ZmgyhpMBh0JR_A33buUScK2t_Onhdw
https://mshare.io/file/5H7Qm4B

Password : freetuts.download