---
id: 8172
title: "Getting Started with WMI Weaponization – Part 1"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/adversary-simulation/getting-started-wmi-weaponization-part-1/"
published_at: "2017-04-04T00:00:00Z"
tags: ["windows", "wmi", "weaponization", "wbem", "wmic"]
phying_url: "https://phying.com/item/8172"
lang: en
---

# Getting Started with WMI Weaponization – Part 1

## Summary

Kicks off a WMI series with its WBEM roots and access channels from VBScript to wmic.exe, framing why the always-on management web service is such a fertile ground for weaponization.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2017-04-04T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/adversary-simulation/getting-started-wmi-weaponization-part-1/
- **Phying News:** https://phying.com/item/8172