---
id: 8170
title: "Getting Started with WMI Weaponization – Part 3"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/adversary-simulation/getting-started-wmi-weaponization-part-3/"
published_at: "2017-04-11T00:00:00Z"
tags: ["windows", "wmi", "post-exploitation", "lateral-movement", "service-creation"]
phying_url: "https://phying.com/item/8170"
lang: en
---

# Getting Started with WMI Weaponization – Part 3

## Summary

Surveys administrative WMI classes such as Win32_Service for remote service creation and system changes, positioning WMI as a quieter alternative channel for post-exploitation administration.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2017-04-11T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/adversary-simulation/getting-started-wmi-weaponization-part-3/
- **Phying News:** https://phying.com/item/8170