#wmic — Public Fediverse posts

「Windows 11 バージョン 25H2」の新機能は？　「WMIC」「PowerShell 2.0」の削除に注意／「バージョン 24H2」からの変更はほとんどなし
https://forest.watch.impress.co.jp/docs/news/2051428.html

#forest_watch_impress #Windows_11 #WMIC #Wi_Fi_7 #バージョン_25H2 #PowerShell_2_0 #システム_ファイル #システム #Windows

Wow, Microsoft is removing #WMIC from Windows!
But they aren't removing the underlying WMI framework, so threat actors will have to use PowerShell to access WMI.

I'm not sure this will have a significant impact on what Threat Actors do with WMI, however, it'll at least force a Threat Actor to use PowerShell where there is better built-in visibility (if it's enabled), compared to WMIC.

🔗 https://techcommunity.microsoft.com/blog/windows-itpro-blog/wmi-command-line-wmic-utility-deprecation-next-steps/4039242

#IncidentResponse #ThreatDetection #ThreatIntel #CSIRT #CERT

Just learned recently that you can read & write #Dell #BIOS settings natively in Windows on 2018 & later commercial models using #WMI (using either the old #WMIC or #PowerShell: https://dl.dell.com/manuals/common/dell-agentless-client-manageability.pdf )