No Win32_Process Needed - Expanding the WMI Lateral Movement Arsenal

This talk examines how WMI can support lateral movement between Windows endpoints beyond the commonly used Create method of the Win32_Process class. It considers the broader range of WMI classes and methods available to attackers.