https://cansecwest.com/csw15archive.html
https://cansecwest.com/slides/2015/There's%20Something%20about%20WMI%20-%20Chris%20Glyer.pptx
http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp__understanding-wmi-malware.pdf
防御工具:
http://sourceforge.net/projects/openassetlogger/