December 30, 2023 at 11:41PM

WMIProcessWatcher: A CIA tradecraft technique to asynchronously detect when a process is created using WMI.

https://github.com/hackerhouse-opensource/WMIProcessWatcher

https://t.me/cKure/13397