Skip to content

Hide Navigation Hide TOC

Password Set to Never Expire via WMI (7864a175-3654-4824-9f0d-f0da18ab27c0)

Detects the use of wmic.exe to modify user account settings and explicitly disable password expiration.

Cluster A Galaxy A Cluster B Galaxy B Level
Windows Management Instrumentation - T1047 (01a5a209-b94c-450b-b7f9-946497d91055) Attack Pattern Password Set to Never Expire via WMI (7864a175-3654-4824-9f0d-f0da18ab27c0) Sigma-Rules 1
Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27) Attack Pattern Password Set to Never Expire via WMI (7864a175-3654-4824-9f0d-f0da18ab27c0) Sigma-Rules 1