Blasting Event-Driven Cornucopia: WMI-based User-Space Attacks Blind SIEMs and EDRs
Black Hat 2022 (research dataset; edition scope unverified) · 2022
Presenter: Claudiu Teodorescu · Andrey Golchikov · Igor Korkin
Attributed source ↗ · Plaintext record
CC-BY research dataset. Title: source supplied. Credit: source supplied. Delivery: Not independently verified.
Source date value: 2022-08-10. This is retained as source metadata; recording dates or placeholder timestamps do not establish a session’s actual date.
Rights: Metadata and source links only; abstracts, biographies, transcripts and media not republished
Research dataset: Lukas Walter, Clemens Sauerwein, Daniel Woods, InfoSec.pptx, https://doi.org/10.5281/zenodo.15989593, CC BY 4.0 https://creativecommons.org/licenses/by/4.0/. Changes: metadata extraction, exact-match reconciliation and uncertainty flags. No endorsement implied.
Inspect structured metadata and provenance
{
"id": "research-talk-e5f4bc54f44a5e6a",
"title": "Blasting Event-Driven Cornucopia: WMI-based User-Space Attacks Blind SIEMs and EDRs",
"presenters": [
"Claudiu Teodorescu",
"Andrey Golchikov",
"Igor Korkin"
],
"event": "Black Hat 2022 (research dataset; edition scope unverified)",
"year": "2022",
"source_url": "https://doi.org/10.5281/zenodo.15989593",
"source_kind": "CC-BY research dataset",
"source_file": "speaker_infosec.csv",
"rights": "Metadata and source links only; abstracts, biographies, transcripts and media not republished",
"delivery_status": "Not independently verified",
"title_status": "source supplied",
"presenter_status": "source supplied",
"media": [
],
"provenance": [
{
"raw_title": "Blasting Event-Driven Cornucopia: WMI-based User-Space Attacks Blind SIEMs and EDRs",
"raw_agenda": "10.08.2022",
"date_conflict": false,
"url": "https://doi.org/10.5281/zenodo.15989593",
"file": "speaker_infosec.csv",
"rows": [
166,
167,
168
],
"sha256": "e47480bc376a20292a4f6fd990be7b687f43ff0bfb861267c5533cebf3114d46",
"attribution": "Lukas Walter, Clemens Sauerwein, Daniel Woods; InfoSec.pptx dataset; CC-BY-4.0; extracted metadata, omitted abstracts and automated classifications",
"license": "https://creativecommons.org/licenses/by/4.0/"
}
],
"raw_agenda": "10.08.2022",
"date_conflict": false,
"date": "2022-08-10",
"duration_minutes": "40",
"source_conference_label": "Blackhat22",
"deduplication_note": "No exact same-edition normalized-title match; fuzzy duplicates require review"
}