So recently I've been trying to solve a ctf.

I was able to determine WMI persistence mechanism is used with the aid of ActiveScriptEventConsumer& EventFilter classes. I believe finding the creation date of this Event will help me solve this problem. Any idea on how can I find this date? I tried multiple Wmi parser tools but none of them showed the creation date of the event. Thanks

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.