Agent-Skills.md

Agent Skills: hunting-for-lateral-movement-via-wmi

Detect WMI-based lateral movement by analyzing Windows Event ID 4688 process creation and Sysmon Event ID 1 for WmiPrvSE.exe child process patterns, remote process execution, and WMI event subscription persistence.

UncategorizedID: plurigrid/asi/hunting-for-lateral-movement-via-wmi

Repository

plurigrid/asi
plurigridLicense: MIT
165

Install this agent skill to your local

pnpm dlx add-skill https://github.com/plurigrid/asi/hunting-for-lateral-movement-via-wmi

Skill Files

Browse the full folder contents for hunting-for-lateral-movement-via-wmi.

Download Skill

Loading file tree…

Select a file to preview its contents.