🧬 WMI
Windows Management Instrumentation reference queries and WQL-focused scripts.
Win32_Processor: Querying Processor Info Remotely (CIM Session)
Runs the same Win32_Processor WQL query against a remote computer over a CIM session — the modern, WinRM-based replacem…
Win32_UserAccount: Local User Accounts (WQL)
A minimal WQL reference query against Win32_UserAccount — the raw SELECT statement plus a one-line runner, useful for l…
Win32_UserAccount: Event-Driven Monitoring (WQL __InstanceCreationEvent)
Subscribes to WMI's __InstanceCreationEvent for Win32_UserAccount via Register-CimIndicationEvent — real WQL event quer…
Win32_Product: Finding Associated Objects (WQL ASSOCIATORS OF)
Demonstrates Get-CimAssociatedInstance, the modern CIM equivalent of WQL's ASSOCIATORS OF syntax, against a Win32_Produ…
Win32_BIOS: Event-Driven Monitoring (WQL __InstanceCreationEvent)
Subscribes to WMI's __InstanceCreationEvent for Win32_BIOS via Register-CimIndicationEvent — real WQL event query synta…
Win32_CDROMDrive: Filtering CD/DVD Drives (WQL WHERE)
Shows the WQL WHERE clause syntax against Win32_CDROMDrive, starting from a LIKE '%' wildcard you customize with a real…
Win32_SoundDevice: Event-Driven Monitoring (WQL __InstanceCreationEvent)
Subscribes to WMI's __InstanceCreationEvent for Win32_SoundDevice via Register-CimIndicationEvent — real WQL event quer…
Win32_Share: Network Shares (WQL)
A minimal WQL reference query against Win32_Share — the raw SELECT statement plus a one-line runner, useful for learnin…
Win32_BaseBoard: Filtering Motherboard Info (WQL WHERE)
Shows the WQL WHERE clause syntax against Win32_BaseBoard, starting from a LIKE '%' wildcard you customize with a real …
Win32_DiskDrive: Discovering Available Properties (Get-CimClass)
Uses Get-CimClass to list every real property and method Win32_DiskDrive exposes on the current system, instead of gues…
Win32_PageFileUsage: Event-Driven Monitoring (WQL __InstanceCreationEvent)
Subscribes to WMI's __InstanceCreationEvent for Win32_PageFileUsage via Register-CimIndicationEvent — real WQL event qu…
Win32_Environment: Finding Associated Objects (WQL ASSOCIATORS OF)
Demonstrates Get-CimAssociatedInstance, the modern CIM equivalent of WQL's ASSOCIATORS OF syntax, against a Win32_Envir…