Added rules to detect lolbas provlaunch.exe and also filter on legitimate system non-wmiprvse processes loading WMI modules #13120
Job | Run time |
---|---|
25s | |
42s | |
3m 8s | |
4m 5s | |
2m 4s | |
32s | |
54s | |
7m 21s | |
5s | |
19m 16s |
Job | Run time |
---|---|
25s | |
42s | |
3m 8s | |
4m 5s | |
2m 4s | |
32s | |
54s | |
7m 21s | |
5s | |
19m 16s |