# WMI Lateral Movement Report Template

## Movement Log

| # | Source | Target | Method | Credential | Time | Result |
|---|--------|--------|--------|------------|------|--------|
| 1 | | | wmiexec / dcomexec / native | | | |

## Access Summary

| Host | Admin Access | Credentials Recovered | Sessions Found |
|------|-------------|----------------------|----------------|
| | Yes/No | | |

## OPSEC Notes

- [ ] No services created on target hosts
- [ ] Temporary output files cleaned from ADMIN$
- [ ] WMI event subscription artifacts removed
- [ ] No persistent modifications left on targets