Potential remote wmi activescripteventconsumers activity

Intel Name: Potential remote wmi activescripteventconsumers activity

Date of Scan: September 18, 2024

Impact: Medium

Summary:
Identify potential adversaries using WMI ActiveScriptEventConsumers remotely to move laterally within a network. This event is best correlated and serves as valuable enrichment to assess possible lateral movement activities.

More Details