WMI_Forensics icon indicating copy to clipboard operation
WMI_Forensics copied to clipboard

Parser may not be working correctly

Open blueteam0ps opened this issue 6 years ago • 0 comments

Hey David, This is an awesome tool. However, I just did a POC test with a WMI persistence on a VM and your script did not pick up the persistence. I could view it live using WMI explorer. Any idea what could have caused that.

blueteam0ps avatar May 08 '19 06:05 blueteam0ps