Mass PowerShell and WMImplant to Get Process Output

When developing WMImplant, I wanted to ensure I would have some of the same capabilities on a Device Guard (now Windows Defender Application Control) protected system as I would on a non-protected when utilizing Beacon or Meterpreter. WMImplant is a stepping stone for creating the same capabilities, but also presented

KitPloit - PenTest Tools!

Process Monitoring with PowerShell - Petri IT Knowledgebase

WMImplant – A WMI Based Agentless Post-Exploitation RAT Developed in PowerShell

Use PowerShell to Monitor Specific Process Creation - Scripting Blog [archived]

Cyber Wardog Lab: Chronicles of a Threat Hunter: Hunting for WMImplant with Sysmon and ELK - Part I (EID 1,12, 13, 17 & 18)

Find the owner of a process

awesome-cyber-security/Readme_en.md at master · xrkk/awesome-cyber-security · GitHub

Get the list of active processes sorted by CPU usage » PowerShell » Code Snippets » MdmSoft

KitPloit - PenTest Tools!