🧬 WMI
Windows Management Instrumentation reference queries and WQL-focused scripts.
Win32_NetworkAdapter: Filtering Network Adapters (WQL WHERE)
Shows the WQL WHERE clause syntax against Win32_NetworkAdapter, starting from a LIKE '%' wildcard you customize with a …
Win32_OperatingSystem: Finding Associated Objects (WQL ASSOCIATORS OF)
Demonstrates Get-CimAssociatedInstance, the modern CIM equivalent of WQL's ASSOCIATORS OF syntax, against a Win32_Opera…
Win32_BIOS: Sorting BIOS Info (WQL has no ORDER BY)
WQL has no ORDER BY clause — this shows the standard workaround of piping Get-CimInstance results through Sort-Object o…
Win32_Printer: Event-Driven Monitoring (WQL __InstanceCreationEvent)
Subscribes to WMI's __InstanceCreationEvent for Win32_Printer via Register-CimIndicationEvent — real WQL event query sy…
Win32_Keyboard: Keyboard Info (WQL)
A minimal WQL reference query against Win32_Keyboard — the raw SELECT statement plus a one-line runner, useful for lear…
Win32_Service: Event-Driven Monitoring (WQL __InstanceCreationEvent)
Subscribes to WMI's __InstanceCreationEvent for Win32_Service via Register-CimIndicationEvent — real WQL event query sy…
Win32_ComputerSystem: Computer System Info (WQL)
A minimal WQL reference query against Win32_ComputerSystem — the raw SELECT statement plus a one-line runner, useful fo…
Win32_LogicalDisk: Sorting Logical Disks (WQL has no ORDER BY)
WQL has no ORDER BY clause — this shows the standard workaround of piping Get-CimInstance results through Sort-Object o…
Win32_SystemDriver: Event-Driven Monitoring (WQL __InstanceCreationEvent)
Subscribes to WMI's __InstanceCreationEvent for Win32_SystemDriver via Register-CimIndicationEvent — real WQL event que…
Win32_NetworkLoginProfile: Network Login Profiles (WQL)
A minimal WQL reference query against Win32_NetworkLoginProfile — the raw SELECT statement plus a one-line runner, usef…
Win32_DiskDrive: Querying Physical Disk Drives Remotely (CIM Session)
Runs the same Win32_DiskDrive WQL query against a remote computer over a CIM session — the modern, WinRM-based replacem…
Win32_Share: Sorting Network Shares (WQL has no ORDER BY)
WQL has no ORDER BY clause — this shows the standard workaround of piping Get-CimInstance results through Sort-Object o…