Windows Management Instrumentation is a set of extensions to the Windows Driver Model that provides an operating system interface through which instrumented components provide information and notification. From Wikipedia
Researchers describe in-memory IIS backdoors with evasive TTPs that maintained access for nearly two years.