wmi-based-user-space

Black Hat USA 2022·39 min

• Black Hat
• Blue Team
• Date: 2022
• Location: Black Hat

Andrey Golchikov · Igor Korkin · Claudiu Teodorescu

Investigates blasting Event-Driven Cornucopia: WMI-based User-Space Attacks Blind SIEMs and EDRs and evaluates key implications for security practitioners.