[Rule Tuning] Suspicious WMI Event Subscription Created#4618

w0rk3r merged 3 commits intomainelastic/detection-rules:mainfrom

rt_0elastic/detection-rules:rt_0Copy head branch name to clipboard