WMI Reconnaissance Tracking — WMI Activity logs for internal discovery

Hard GIAC GCIH cybersecurity drill: You are a Threat Hunter at Apex Defense. The SOC suspects an attacker is utilizing "Living off the Land" techniques to