S
Saad Imran1
Hello everyone,I have been working and researching about wmi and wmic, and I have come to the conclusion that wmic can be abused by attackers if the system gets compromised and it should not be available to the local users but to admins. I want to know if we block the access of wmic to local users will it affect the working of wmi (utilities) which are updating of windows and other tasks? Keep in mind that Microsoft has given the recommendation of block rules which also include this file wmic.exe.link of the MS recommendation:Windows threat protection - Windows security
Continue reading...
Continue reading...