Initial commit - 611 cybersecurity skills across all subdomains

skills/performing-lateral-movement-with-wmiexec/references/workflows.md

@@ -0,0 +1,21 @@
+# Workflows - WMIExec Lateral Movement
+
+## Lateral Movement Chain
+
+```
+1. Initial Compromise → Credential Harvesting → WMIExec to target
+2. On each new host:
+   ├── Enumerate local users and groups
+   ├── Harvest credentials (LaZagne, Mimikatz, SAM dump)
+   ├── Check for domain admin sessions
+   └── Pivot to next target using recovered credentials
+```
+
+## Multi-Method Fallback
+
+```
+Primary:   wmiexec.py (semi-interactive, output capture)
+Fallback1: dcomexec.py (different DCOM object, avoids WMI-specific detection)
+Fallback2: Native PowerShell CIM (blends with admin activity)
+Fallback3: smbexec.py (uses SMB service, noisier but reliable)
+```