WMI Query for MSFT_NetQosPolicySettingData
Detects WMI queries targeting QoS policy setting data for enumeration or manipulation. This could indicate an adversary attempting to discover or modify Quality of Service policies on a system.
Microsoft Sentinel (KQL)

