QuestionQ32

Threat Hunting Techniques

Refer to the exhibit.

Question Image

A security team is developing a Python script that changes a user’s password when suspicious activity is detected. The script is restricted to Linux operating systems but must also support Windows.

Which Python library should the script use to manage the data and services of Windows endpoints?

Explanation

Windows Management Instrumentation (WMI) is the Windows infrastructure for management data and operations, including administrative scripts and remote management tasks. The Python wmi library is therefore the appropriate choice for managing Windows endpoint data and services. Windows Management Instrumentation — Microsoft Learn

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!