home/categories/computational-chemistry/mukul975-anthropic-cybersecurity-skills-skills-detecting-wmi-persistence-skill-md
computational-chemistryresearch
detecting-wmi-persistence
Detect WMI event subscription persistence by analyzing Sysmon Event IDs 19, 20, and 21 for malicious EventFilter, EventConsumer, and FilterToConsumerBinding creation.
maintainer
mukul975
اپ ڈیٹ ہوا 4/6/2026
اسٹارز
4240
فورکس
464
quick start
Installation and usage
Detect WMI event subscription persistence by analyzing Sysmon Event IDs 19, 20, and 21 for malicious EventFilter, EventConsumer, and FilterToConsumerBinding creation.
انسٹالیشن
$ install --globalskills.sh
استعمال
انسٹال کرنے کے بعد، آپ یہ اسکل ٹرمینل میں درج ذیل کمانڈ چلا کر استعمال کر سکتے ہیں:
skills use detecting-wmi-persistence