home/categories/computational-chemistry/mukul975-anthropic-cybersecurity-skills-skills-detecting-wmi-persistence-skill-md
computational-chemistryresearch
detecting-wmi-persistence
Detect WMI event subscription persistence by analyzing Sysmon Event IDs 19, 20, and 21 for malicious EventFilter, EventConsumer, and FilterToConsumerBinding creation.
maintainer
mukul975
更新於 2026/4/6
星標
4240
分支
464
quick start
Installation and usage
Detect WMI event subscription persistence by analyzing Sysmon Event IDs 19, 20, and 21 for malicious EventFilter, EventConsumer, and FilterToConsumerBinding creation.
安裝
$ install --globalskills.sh
使用
安裝後，您可以透過在終端機執行以下指令來使用此技能：
skills use detecting-wmi-persistence