WmiPrvSE Spawned A Process (d21374ff-f574-44a7-9998-4a8c8bf33d7d)
Detects WmiPrvSE spawning a process
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| WmiPrvSE Spawned A Process (d21374ff-f574-44a7-9998-4a8c8bf33d7d) | Sigma-Rules | Windows Management Instrumentation - T1047 (01a5a209-b94c-450b-b7f9-946497d91055) | Attack Pattern | 1 |