Skip to content
Threat Feed
Subscribe

Tag

Attack.t1546.003

1 brief RSS
high advisory

WMI Persistence - Script Event Consumer File Write

Detection of file writes associated with the WMI script event consumer process (scrcons.exe).

attack.persistence attack.privilege-escalation attack.t1546.003 windows
1r