💻 WMI AbuseSpecificWMI persistence, Windows Management Instrumentation, WMI event subscriptions, lateral movement