T1057

Process Discovery

discovered 2026-06-21

psutil-based network-connection counts and admin check; WMI keyboard/mouse enumeration.

View on MITRE ATT&CK

Seen in packages

Campaigns