3 ms·
I realize WMI[1] is a Windows-thing only, but if you're already on the Windows-platform, WMI comes shipped out of the box and has been for probably a decade or
by josteink 9y ago
I realize WMI[1] is a Windows-thing only, but if you're already on the Windows-platform, WMI comes shipped out of the box and has been for probably a decade or more, and is overall very well supported.
It has its quirks, but there's practically no part of the system you shouldn't be able to get information about using WQL[2].
[1] https://msdn.microsoft.com/en-us/library/ms186146(vs.80).aspx https://msdn.microsoft.com/en-us/library/ms186146(vs.80).asp...
[2] https://en.m.wikipedia.org/wiki/WQL https://en.m.wikipedia.org/wiki/WQL
- Already__Taken 9y agoThe nice thing osquery can have is disconnecting what's currently turned on and connected this second from what records you're getting back. OSquery can pump results into a DB that you look through, WMI I've got to check for myself what's turned on, did it all report etc. A driver for wmi in osquery would be a great addition.