WMI-Based Hardware/OS Fingerprinting and AV Product Enumeration

Duo Tech@duotech

•updated Jul 23, 2026•2•0•44

Detects a single process invocation querying WMI hardware/OS classes together with AntiVirusProduct/SecurityCenter2 enumeration, consistent with a reconnaissance module performing hardware/OS fingerprinting and AV product enumeration.