Enumerate process information
Tactic: Discovery
This procedure enumerates process information such a path, command line, and process id using wmic. Attackers will use this technique to gather information about specific processes on a system such as anti-virus or other security products in order to evade defenses.
View Command
You must be logged in to view this TTPs command.
LoginTest this TTP
Download Operator (1.7.1)
Follow @preludeorg on Twitter for new chains and more.
Join the Prelude Discord to discuss chains and more.
Keep up to date with code changes and community activity on Github