#wmic — Public Fediverse posts

#Microsoft starts removing #WMIC tool used by cybercriminals

https://www.bleepingcomputer.com/news/microsoft/microsoft-removes-wmic-lolbin-tool-in-windows-11-beta-builds/

#cybersecurity #Windows

Microsoft announced that new Windows 11 installations will no longer include the WMIC component by default, primarily citing long-standing security concerns.

#Microsoft #Windows11 #WMIC #Cybersecurity #TechNews

http://securityonline.info/microsoft-removes-wmic-windows-11/?utm_source=mastodon&utm_medium=jetpack_social

クライアントOSでの非推奨化から5年、「WMIC」の削除プロセスがとうとう最終段階に
https://forest.watch.impress.co.jp/docs/news/insiderpre/2133152.html

#forest_watch_impress #PowerShell #WMI #Windows_11 #WMIC #システム_ファイル #システム #Windows

上下左右のタスクバー、新しくなった［スタート］画面がRelease Previewチャネルに／「Windows Search」も強化、Web検索を無効化することも
https://forest.watch.impress.co.jp/docs/news/2132963.html

#forest_watch_impress #タスク_バー #Windows_Insider_Program #Release_Preview #Windows_Search #Windows_11 #スタート #WMIC

Nach 25 Jahren wirft #Microsoft das Admin-Tool #WMIC endgültig aus #Windows11. Das aktuelle optionale Update KB5120998 löscht das Werkzeug restlos. Nutzer sollten auf #PowerShell umsteigen. https://winfuture.de/news,160641.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

Wow, Microsoft is removing #WMIC from Windows!
But they aren't removing the underlying WMI framework, so threat actors will have to use PowerShell to access WMI.

I'm not sure this will have a significant impact on what Threat Actors do with WMI, however, it'll at least force a Threat Actor to use PowerShell where there is better built-in visibility (if it's enabled), compared to WMIC.

🔗 https://techcommunity.microsoft.com/blog/windows-itpro-blog/wmi-command-line-wmic-utility-deprecation-next-steps/4039242

#IncidentResponse #ThreatDetection #ThreatIntel #CSIRT #CERT

Just learned recently that you can read & write #Dell #BIOS settings natively in Windows on 2018 & later commercial models using #WMI (using either the old #WMIC or #PowerShell: https://dl.dell.com/manuals/common/dell-agentless-client-manageability.pdf )