Enumerate process information

This procedure enumerates process information such a path, command line, and process id using wmic. Attackers will use this technique to gather information about specific processes on a system such as anti-virus or other security products in order to evade defenses.
View Command

You must be logged in to view this TTPs command.


Test this TTP

Download Operator (1.7.1)