---
id: 8171
title: "Getting Started with WMI Weaponization – Part 2"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/adversary-simulation/getting-started-wmi-weaponization-part-2/"
published_at: "2017-04-04T00:00:00Z"
tags: ["windows", "powershell", "wmi", "enumeration", "cim"]
phying_url: "https://phying.com/item/8171"
lang: en
---

# Getting Started with WMI Weaponization – Part 2

## Summary

Teaches enumerating the 1,500-plus WMI classes on a system with Get-CimClass, then dissecting properties and methods of classes like Win32_Process to find attacker-useful functionality.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2017-04-04T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/adversary-simulation/getting-started-wmi-weaponization-part-2/
- **Phying News:** https://phying.com/item/8171