ConceptsWMI Event Subscriptions
WMI Event Subscriptions
A Windows persistence mechanism using WMI's event-subscription model to run code on specified triggers, popular with attackers because it's flexible, fileless, and easy to overlook.
7 direct links1 lesson
Concept Neighborhood
Explore this concept’s connections in the groups below.
Related · bigger circles cover more lessons
Start here
Sysmon
A related concept to explore, covered by 8 lessons.
Relatedsorted by lesson coverage
SysmonStart here
8
lessons
Windows SID
6
lessons
Windows Registry
3
lessons
Windows Event Log
2
lessons
Persistence Audit
1
lesson
Persistence Mechanisms
1
lesson
Show 1 more connection
Related Lessons
1 lesson covers this conceptSign in to open lesson content directly.