skills/mukul975/anthropic-cybersecurity-skills/hunting-for-lateral-movement-via-wmi/Gen Agent Trust Hub
hunting-for-lateral-movement-via-wmi
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill analyzes local Windows Event Logs (EVTX files) for security indicators related to WMI process creation and event subscriptions. All operations are executed locally, and there are no instances of remote code execution, credential harvesting, or data exfiltration.
Audit Metadata