WMI_Forensics
WMI_Forensics copied to clipboard
Parser may not be working correctly
Hey David, This is an awesome tool. However, I just did a POC test with a WMI persistence on a VM and your script did not pick up the persistence. I could view it live using WMI explorer. Any idea what could have caused that.