.. /.Mof

Script

Contributors:

@TalenceSecurity

Description:

Managed Object Format (MOF) is the language used to describe Common Information Model (CIM) classes. The recommended way for WMI providers to implement new WMI classes is in MOF files which are compiled using Mofcomp.exe into the WMI repository. It is also possible to create and manipulate CIM classes and instances using the COM API for WMI.

OS:

Windows

Recommendation:

Block unknown MOF files

Resources:

https://docs.microsoft.com/en-us/windows/win32/wmisdk/managed-object-format--mof-
https://docs.microsoft.com/en-us/windows/win32/wmisdk/compiling-mof-files
https://docs.microsoft.com/en-us/windows/win32/wmisdk/running-the-mof-compiler-on-a-file

File Samples: