🧬 WMI

Windows Management Instrumentation reference queries and WQL-focused scripts.

🧬 WQL / PowerShell

Win32_Environment: Sorting Environment Variables (WQL has no ORDER BY)

WQL has no ORDER BY clause — this shows the standard workaround of piping Get-CimInstance results through Sort-Object o…

🧬 WQL / PowerShell

Win32_BIOS: Filtering BIOS Info (WQL WHERE)

Shows the WQL WHERE clause syntax against Win32_BIOS, starting from a LIKE '%' wildcard you customize with a real searc…

🧬 WQL / PowerShell

Win32_QuickFixEngineering: Querying Installed Hotfixes Remotely (CIM Session)

Runs the same Win32_QuickFixEngineering WQL query against a remote computer over a CIM session — the modern, WinRM-base…

🧬 WQL / PowerShell

Win32_LogicalDisk: Discovering Available Properties (Get-CimClass)

Uses Get-CimClass to list every real property and method Win32_LogicalDisk exposes on the current system, instead of gu…

🧬 WQL / PowerShell

Win32_ComputerSystemProduct: Sorting Computer System Product Info (WQL has no ORDER BY)

WQL has no ORDER BY clause — this shows the standard workaround of piping Get-CimInstance results through Sort-Object o…

🧬 WQL / PowerShell

Win32_Group: Querying Local Groups Remotely (CIM Session)

Runs the same Win32_Group WQL query against a remote computer over a CIM session — the modern, WinRM-based replacement …

🧬 WQL / PowerShell

Win32_Battery: Finding Associated Objects (WQL ASSOCIATORS OF)

Demonstrates Get-CimAssociatedInstance, the modern CIM equivalent of WQL's ASSOCIATORS OF syntax, against a Win32_Batte…

🧬 WQL / PowerShell

Win32_Product: Filtering Installed MSI Products (WQL WHERE)

Shows the WQL WHERE clause syntax against Win32_Product, starting from a LIKE '%' wildcard you customize with a real se…

🧬 WQL / PowerShell

Win32_CDROMDrive: Event-Driven Monitoring (WQL __InstanceCreationEvent)

Subscribes to WMI's __InstanceCreationEvent for Win32_CDROMDrive via Register-CimIndicationEvent — real WQL event query…

🧬 WQL / PowerShell

Win32_OperatingSystem: Event-Driven Monitoring (WQL __InstanceCreationEvent)

Subscribes to WMI's __InstanceCreationEvent for Win32_OperatingSystem via Register-CimIndicationEvent — real WQL event …

🧬 WQL / PowerShell

Win32_ComputerSystemProduct: Querying Computer System Product Info Remotely (CIM Session)

Runs the same Win32_ComputerSystemProduct WQL query against a remote computer over a CIM session — the modern, WinRM-ba…

🧬 WQL / PowerShell

Win32_CDROMDrive: Sorting CD/DVD Drives (WQL has no ORDER BY)

WQL has no ORDER BY clause — this shows the standard workaround of piping Get-CimInstance results through Sort-Object o…