Execution data in ATTiRe represents an execution event ... flags" Coverage and testing against the badly named procedure could lead to a false sense of security for other types of WMI execution ...

This is a PowerShell module that conforms to the logger API used by Invoke-AtomicRedTeam and generates ATTiRe logs that can be imported into VECTR. More information on the ATTiRe format and how to ...