Daily Archives: January 18, 2018

WMI_Forensics: find evidence in WMI repositories

January 18th, 2018 📆 | 5773 Views ⚑

WMI_Forensics This repository contains scripts used to find evidence in WMI repositories, specifically OBJECTS.DATA files located at: C:\WINDOWS\system32\wbem\Repository\OBJECTS.DATA C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Download









Back to Top ↑