A CIA tradecraft technique to asynchronously detect when a process is created using WMI. - View it on GitHub