References

• APTs/Strategies
• ATP records, studies, etc.
• Persistence Resources

APTs/Strategies

ATP records, studies, etc.

VX Underground

vx-underground.org

Persistence Resources

These are things I want to research further:

• https://pentestlab.blog/2020/01/21/persistence-wmi-event-subscription/
• https://learn.microsoft.com/en-us/windows/win32/wmisdk/managed-object-format--mof-
• https://attack.mitre.org/techniques/T1218/010/
• https://learn.microsoft.com/en-us/windows/win32/com/the-component-object-model

MOF object reference:

• https://www.dmtf.org/sites/default/files/standards/documents/DSP0221_3.0.0.pdf 

CIM Metamodel reference:

• https://www.dmtf.org/sites/default/files/standards/documents/DSP0004_3.0.1.pdf