Successful Account Login Via WMI (5af54681-df95-4c26-854f-2565e13cfab0)
Detects successful logon attempts performed with WMI
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Successful Account Login Via WMI (5af54681-df95-4c26-854f-2565e13cfab0) | Sigma-Rules | Windows Management Instrumentation - T1047 (01a5a209-b94c-450b-b7f9-946497d91055) | Attack Pattern | 1 |