Port 22

Intro into abusing and identifying WMI Event Subscriptions for persistence