So recently I've been trying to solve a ctf.
I was able to determine WMI persistence mechanism is used with the aid of
EventFilter classes. I believe finding the creation date of this Event will help me solve this problem. Any idea on how can I find this date? I tried multiple Wmi parser tools but none of them showed the creation date of the event.