aol.pm

WhyMI so Sexy? WMI Attacks, Real-Time Defense, and Advanced Forensic Analysis

DEF CON 23 · 2015

Presenter: Matt Graeber · Willi Ballenthin · Claudiu Teodorescu

Attributed source ↗ · Plaintext record

Independent InfoconDB index. Title: source supplied. Credit: research dataset; independent index title match. Delivery: Not independently verified.

Source date value: 2015-08-08. This is retained as source metadata; recording dates or placeholder timestamps do not establish a session’s actual date.

Rights: Metadata and source links only; abstracts, biographies, transcripts and media not republished

Research dataset: Lukas Walter, Clemens Sauerwein, Daniel Woods, InfoSec.pptx, https://doi.org/10.5281/zenodo.15989593, CC BY 4.0 https://creativecommons.org/licenses/by/4.0/. Changes: metadata extraction, exact-match reconciliation and uncertainty flags. No endorsement implied.

Inspect structured metadata and provenance
{
  "id": "defcon-index-23-5ca2e4aa0d3612c1",
  "title": "WhyMI so Sexy? WMI Attacks, Real-Time Defense, and Advanced Forensic Analysis",
  "presenters": [
    "Matt Graeber",
    "Willi Ballenthin",
    "Claudiu Teodorescu"
  ],
  "event": "DEF CON 23",
  "year": "2015",
  "source_url": "https://infocondb.org/con/def-con/def-con-23/whymi-so-sexy-wmi-attacks-real-time-defense-and-advanced-forensic-analysis",
  "source_kind": "Independent InfoconDB index",
  "source_file": "infocondb-def-con-23.html",
  "rights": "Metadata and source links only; abstracts, biographies, transcripts and media not republished",
  "delivery_status": "Not independently verified",
  "title_status": "source supplied",
  "presenter_status": "research dataset; independent index title match",
  "media": [

  ],
  "provenance": [
    {
      "file": "infocondb-def-con-23.html",
      "url": "https://infocondb.org/con/def-con/def-con-23/",
      "source_kind": "secondary independent index",
      "sha256": "f28fe11609199444e4cfca4d10c3cd84f45667da8d8a7e51b7edcd7f9c3231b8",
      "checked": "2026-10-16T03:48:37Z"
    },
    {
      "raw_title": "WhyMI so Sexy? WMI Attacks, Real-Time Defense, and Advanced Forensic Analysis",
      "raw_agenda": "08.08.2015",
      "date_conflict": false,
      "url": "https://doi.org/10.5281/zenodo.15989593",
      "file": "speaker_infosec.csv",
      "rows": [
        9708,
        9709,
        9710
      ],
      "sha256": "e47480bc376a20292a4f6fd990be7b687f43ff0bfb861267c5533cebf3114d46",
      "attribution": "Lukas Walter, Clemens Sauerwein, Daniel Woods; InfoSec.pptx dataset; CC-BY-4.0; extracted metadata, omitted abstracts and automated classifications",
      "license": "https://creativecommons.org/licenses/by/4.0/"
    }
  ],
  "date": "2015-08-08",
  "research_credit_rows": [
    {
      "presenter": "Matt Graeber",
      "role": "Reverse Engineer",
      "affiliation": "FireEye Inc.",
      "row": 9708
    },
    {
      "presenter": "Willi Ballenthin",
      "role": "Reverse Engineer",
      "affiliation": "FireEye Inc.",
      "row": 9709
    },
    {
      "presenter": "Claudiu Teodorescu",
      "role": "Reverse Engineer",
      "affiliation": "FireEye Inc.",
      "row": 9710
    }
  ]
}

Coverage and source gaps

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.