This Metasploit module will create a permanent WMI event subscription to achieve file-less persistence using one of five methods.
Source: WMI Event Subscription Persistence

The post WMI Event Subscription Persistence appeared first on MondoUnix.