attack-stix-data icon indicating copy to clipboard operation
attack-stix-data copied to clipboard

Description of WMI Creation added to multiple other data sources

Open d4rk-d4nph3 opened this issue 1 year ago • 0 comments

WMI Creation's description [Initial construction of a WMI object, such as a filter, consumer, subscription, binding, or provider (ex: Sysmon EIDs 19-21)] has been added to other data sources: Network Connection Created, Malware Content, OS API Execution, Host Status, and Active DNS.

d4rk-d4nph3 avatar Sep 22 '22 11:09 d4rk-d4nph3