Files
Anthropic-Cybersecurity-Skills/skills/performing-lateral-movement-with-wmiexec/assets/template.md
T

597 B

WMI Lateral Movement Report Template

Movement Log

# Source Target Method Credential Time Result
1 wmiexec / dcomexec / native

Access Summary

Host Admin Access Credentials Recovered Sessions Found
Yes/No

OPSEC Notes

  • No services created on target hosts
  • Temporary output files cleaned from ADMIN$
  • WMI event subscription artifacts removed
  • No persistent modifications left on targets