BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Antisyphon Training - ECPv6.15.20//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Antisyphon Training
X-ORIGINAL-URL:https://www.antisyphontraining.com
X-WR-CALDESC:Events for Antisyphon Training
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:America/New_York
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20230312T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20231105T060000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20240310T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20241103T060000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20250309T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20251102T060000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=America/New_York:20240117T120000
DTEND;TZID=America/New_York:20240117T130000
DTSTAMP:20260505T074115
CREATED:20240905T212000Z
LAST-MODIFIED:20240905T212002Z
UID:10000622-1705492800-1705496400@www.antisyphontraining.com
SUMMARY:Anti-Cast: WMI Abuse: How Threat Actors Use WMI with Gerard Johansen
DESCRIPTION:In this free one-hour Antisyphon Anti-Cast\, Gerard Johansen\, Principal Readiness Engineer for Red Canary and Antisyphon instructor\, will run through how threat actors use the Windows Management Instrumentation (WMI) for Lateral Movement and Persistence. \n\n\n\nGerard will walk through how threat actors use WMI\, what trace evidence is left and how to analyze WMI abuse. \n\n\n\nFinally\, Gerard will walk through some demonstrations using Atomic Red Team and forensic tools. \n\n\n\nChat with your fellow attendees in the Antisyphon Discord server:https://discord.gg/antisyphonin the #🍿anticasts-chat channel \n\n\n\nStay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com \n\n\n\n2024_01_17_anticast_WMI Abuse-How Threat Actors Use WMI_Gerard JohansenDownload the slides here!
URL:https://www.antisyphontraining.com/event/anti-cast-wmi-abuse-how-threat-actors-use-wmi-with-gerard-johansen/
CATEGORIES:Anti-Cast
ATTACH;FMTTYPE=image/png:https://www.antisyphontraining.com/wp-content/uploads/2024/09/WMI-Abuse_How-Threat-Actors-Use-WMI_Gerard-Johansen.png
END:VEVENT
END:VCALENDAR