Windows WMIC CPU Discovery

The analytic detects the use of WMIC (Windows Management Instrumentation Command-line) for CPU discovery, specifically looking for commands like "wmic cpu get name". This behavior is often associated with reconnaissance, where adversaries gather system hardware details, assess processing power, or determine if the environment is virtualized. While WMIC is a legitimate administrative tool, its use for CPU queries outside of normal inventory or management scripts can indicate malicious intent. Monitoring command-line executions of WMIC with CPU-related arguments and correlating with other discovery activity can help identify attacker reconnaissance.