Copy | Scripting and security

cd C:\xampp\php

'<?php 
	$url = "https://www.jesusninoc.com/2018/06/09/how-to-make-an-offline-mirror-copy-of-a-website-with-wsl-windows-subsystem-for-linux/";
	$input = @file_get_contents($url) or die("Could not access file: $url");
	
	$dom = new DOMDocument();
	@$dom->loadHTML($input);

	$xpath = new DOMXPath($dom);
	$result = "";

	foreach($xpath->evaluate(''//div[@class="crayon-plain-wrap"]'') as $childNode) {
		$result .= $dom->saveHtml($childNode);
	}
	
	echo $result;
?>' | .\php.exe

cd C:\xampp\php

'<?php

$url = "https://www.jesusninoc.com/2018/06/09/how-to-make-an-offline-mirror-copy-of-a-website-with-wsl-windows-subsystem-for-linux/";

$input = @file_get_contents($url) or die("Could not access file: $url");

$dom = new DOMDocument();

@$dom->loadHTML($input);

$xpath = new DOMXPath($dom);

$result = "";

foreach($xpath->evaluate(''//div[@class="crayon-plain-wrap"]'') as $childNode) {

$result .= $dom->saveHtml($childNode);

}

echo $result;

?>' | .\php.exe

Bash PowerShell

How to make an offline mirror copy of a website with WSL (Windows Subsystem for Linux)?

09/06/201809/06/2018

bash -c "wget --mirror --convert-links --html-extension --wait=2 -o log https://www.jesusninoc.com"

1	bash -c "wget --mirror --convert-links --html-extension --wait=2 -o log https://www.jesusninoc.com"

--mirror
    Turn on options suitable for mirroring. This option turns on 
    recursion and time-stamping, sets infinite recursion depth,
    and keeps FTP directory listings. It is currently equivalent to 
    ‘-r -N -l inf --no-remove-listing’. 

--convert-links
    After the download is complete, convert the links in the document
    to make them suitable for local viewing.

--html-extension

-o foo
    write "log" output to a file named "foo"

--wait=seconds
    Wait the specified number of seconds between the retrievals.
    Use of this option is recommended, as it lightens the server load 
    by making the requests less frequent.

--mirror

Turn on options suitable for mirroring. This option turns on

recursion and time-stamping, sets infinite recursion depth,

and keeps FTP directory listings. It is currently equivalent to

‘-r -N -l inf --no-remove-listing’.

--convert-links

After the download is complete, convert the links in the document

to make them suitable for local viewing.

--html-extension

-o foo

write "log" output to a file named "foo"

--wait=seconds

Wait the specified number of seconds between the retrievals.

Use of this option is recommended, as it lightens the server load

by making the requests less frequent.

Security

ShinoLocker

29/08/201717/06/2018

ShinoLocker, is ransomware simulator. The difference between ShinoLocker and real ramsomware is that it never asks ransom; you don’t have to pay money to get the decryption key. How To use Download ShinoLocker from ShinoBuilder. Execute it (The encryption will start shortly). Get the decryption key. Decrypt. Take a look the manual. Demonstration

PowerShell

Windows PowerShell aliases

03/08/201707/08/2017

Alias           % -> ForEach-Object                                                   
Alias           ? -> Where-Object                                                     
Alias           ac -> Add-Content                                                     
Alias           asnp -> Add-PSSnapin                                                  
Alias           cat -> Get-Content                                                    
Alias           cd -> Set-Location                                                    
Alias           CFS -> ConvertFrom-String
Alias           chdir -> Set-Location                                                 
Alias           clc -> Clear-Content                                                  
Alias           clear -> Clear-Host                                                   
Alias           clhy -> Clear-History                                                 
Alias           cli -> Clear-Item                                                     
Alias           clp -> Clear-ItemProperty                                             
Alias           cls -> Clear-Host                                                     
Alias           clv -> Clear-Variable                                                 
Alias           cnsn -> Connect-PSSession                                             
Alias           compare -> Compare-Object                                             
Alias           copy -> Copy-Item                                                     
Alias           cp -> Copy-Item                                                       
Alias           cpi -> Copy-Item                                                      
Alias           cpp -> Copy-ItemProperty                                              
Alias           curl -> Invoke-WebRequest                                             
Alias           cvpa -> Convert-Path                                                  
Alias           dbp -> Disable-PSBreakpoint                                           
Alias           del -> Remove-Item                                                    
Alias           diff -> Compare-Object                                                
Alias           dir -> Get-ChildItem                                                  
Alias           dnsn -> Disconnect-PSSession                                          
Alias           ebp -> Enable-PSBreakpoint                                            
Alias           echo -> Write-Output                                                  
Alias           epal -> Export-Alias                                                  
Alias           epcsv -> Export-Csv                                                   
Alias           epsn -> Export-PSSession                                              
Alias           erase -> Remove-Item                                                  
Alias           etsn -> Enter-PSSession                                               
Alias           exsn -> Exit-PSSession                                                
Alias           fc -> Format-Custom                                                   
Alias           fhx -> Format-Hex
Alias           fl -> Format-List                                                     
Alias           foreach -> ForEach-Object                                             
Alias           ft -> Format-Table                                                    
Alias           fw -> Format-Wide                                                     
Alias           gal -> Get-Alias                                                      
Alias           gbp -> Get-PSBreakpoint                                               
Alias           gc -> Get-Content                                                     
Alias           gci -> Get-ChildItem                                                  
Alias           gcm -> Get-Command                                                    
Alias           gcs -> Get-PSCallStack                                                
Alias           gdr -> Get-PSDrive                                                    
Alias           ghy -> Get-History                                                    
Alias           gi -> Get-Item                                                        
Alias           gjb -> Get-Job                                                        
Alias           gl -> Get-Location                                                    
Alias           gm -> Get-Member                                                      
Alias           gmo -> Get-Module                                                     
Alias           gp -> Get-ItemProperty                                                
Alias           gps -> Get-Process                                                    
Alias           gpv -> Get-ItemPropertyValue                                          
Alias           group -> Group-Object                                                 
Alias           gsn -> Get-PSSession                                                  
Alias           gsnp -> Get-PSSnapin                                                  
Alias           gsv -> Get-Service                                                    
Alias           gu -> Get-Unique                                                      
Alias           gv -> Get-Variable                                                    
Alias           gwmi -> Get-WmiObject                                                 
Alias           h -> Get-History                                                      
Alias           history -> Get-History                                                
Alias           icm -> Invoke-Command                                                 
Alias           iex -> Invoke-Expression                                              
Alias           ihy -> Invoke-History                                                 
Alias           ii -> Invoke-Item                                                     
Alias           ipal -> Import-Alias                                                  
Alias           ipcsv -> Import-Csv                                                   
Alias           ipmo -> Import-Module                                                 
Alias           ipsn -> Import-PSSession                                              
Alias           irm -> Invoke-RestMethod                                              
Alias           ise -> powershell_ise.exe                                             
Alias           iwmi -> Invoke-WMIMethod                                              
Alias           iwr -> Invoke-WebRequest                                              
Alias           kill -> Stop-Process                                                  
Alias           lp -> Out-Printer                                                     
Alias           ls -> Get-ChildItem                                                   
Alias           man -> help                                                           
Alias           md -> mkdir                                                           
Alias           measure -> Measure-Object                                             
Alias           mi -> Move-Item                                                       
Alias           mount -> New-PSDrive                                                  
Alias           move -> Move-Item                                                     
Alias           mp -> Move-ItemProperty                                               
Alias           mv -> Move-Item                                                       
Alias           nal -> New-Alias                                                      
Alias           ndr -> New-PSDrive                                                    
Alias           ni -> New-Item                                                        
Alias           nmo -> New-Module                                                     
Alias           npssc -> New-PSSessionConfigurationFile                               
Alias           nsn -> New-PSSession                                                  
Alias           nv -> New-Variable                                                    
Alias           ogv -> Out-GridView                                                   
Alias           oh -> Out-Host                                                        
Alias           popd -> Pop-Location                                                  
Alias           ps -> Get-Process                                                     
Alias           pushd -> Push-Location                                                
Alias           pwd -> Get-Location                                                   
Alias           r -> Invoke-History                                                   
Alias           rbp -> Remove-PSBreakpoint                                            
Alias           rcjb -> Receive-Job                                                   
Alias           rcsn -> Receive-PSSession                                             
Alias           rd -> Remove-Item                                                     
Alias           rdr -> Remove-PSDrive                                                 
Alias           ren -> Rename-Item                                                    
Alias           ri -> Remove-Item                                                     
Alias           rjb -> Remove-Job                                                     
Alias           rm -> Remove-Item                                                     
Alias           rmdir -> Remove-Item                                                  
Alias           rmo -> Remove-Module                                                  
Alias           rni -> Rename-Item                                                    
Alias           rnp -> Rename-ItemProperty                                            
Alias           rp -> Remove-ItemProperty                                             
Alias           rsn -> Remove-PSSession                                               
Alias           rsnp -> Remove-PSSnapin                                               
Alias           rujb -> Resume-Job                                                    
Alias           rv -> Remove-Variable                                                 
Alias           rvpa -> Resolve-Path                                                  
Alias           rwmi -> Remove-WMIObject                                              
Alias           sajb -> Start-Job                                                     
Alias           sal -> Set-Alias                                                      
Alias           saps -> Start-Process                                                 
Alias           sasv -> Start-Service                                                 
Alias           sbp -> Set-PSBreakpoint                                               
Alias           sc -> Set-Content                                                     
Alias           select -> Select-Object                                               
Alias           set -> Set-Variable                                                   
Alias           shcm -> Show-Command                                                  
Alias           si -> Set-Item                                                        
Alias           sl -> Set-Location                                                    
Alias           sleep -> Start-Sleep                                                  
Alias           sls -> Select-String                                                  
Alias           sort -> Sort-Object                                                   
Alias           sp -> Set-ItemProperty                                                
Alias           spjb -> Stop-Job                                                      
Alias           spps -> Stop-Process                                                  
Alias           spsv -> Stop-Service                                                  
Alias           start -> Start-Process                                                
Alias           sujb -> Suspend-Job                                                   
Alias           sv -> Set-Variable                                                    
Alias           swmi -> Set-WMIInstance                                               
Alias           tee -> Tee-Object                                                     
Alias           trcm -> Trace-Command                                                 
Alias           type -> Get-Content                                                   
Alias           wget -> Invoke-WebRequest                                             
Alias           where -> Where-Object                                                 
Alias           wjb -> Wait-Job                                                       
Alias           write -> Write-Output

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

Alias % -> ForEach-Object

Alias ? -> Where-Object

Alias ac -> Add-Content

Alias asnp -> Add-PSSnapin

Alias cat -> Get-Content

Alias cd -> Set-Location

Alias CFS -> ConvertFrom-String

Alias chdir -> Set-Location

Alias clc -> Clear-Content

Alias clear -> Clear-Host

Alias clhy -> Clear-History

Alias cli -> Clear-Item

Alias clp -> Clear-ItemProperty

Alias cls -> Clear-Host

Alias clv -> Clear-Variable

Alias cnsn -> Connect-PSSession

Alias compare -> Compare-Object

Alias copy -> Copy-Item

Alias cp -> Copy-Item

Alias cpi -> Copy-Item

Alias cpp -> Copy-ItemProperty

Alias curl -> Invoke-WebRequest

Alias cvpa -> Convert-Path

Alias dbp -> Disable-PSBreakpoint

Alias del -> Remove-Item

Alias diff -> Compare-Object

Alias dir -> Get-ChildItem

Alias dnsn -> Disconnect-PSSession

Alias ebp -> Enable-PSBreakpoint

Alias echo -> Write-Output

Alias epal -> Export-Alias

Alias epcsv -> Export-Csv

Alias epsn -> Export-PSSession

Alias erase -> Remove-Item

Alias etsn -> Enter-PSSession

Alias exsn -> Exit-PSSession

Alias fc -> Format-Custom

Alias fhx -> Format-Hex

Alias fl -> Format-List

Alias foreach -> ForEach-Object

Alias ft -> Format-Table

Alias fw -> Format-Wide

Alias gal -> Get-Alias

Alias gbp -> Get-PSBreakpoint

Alias gc -> Get-Content

Alias gci -> Get-ChildItem

Alias gcm -> Get-Command

Alias gcs -> Get-PSCallStack

Alias gdr -> Get-PSDrive

Alias ghy -> Get-History

Alias gi -> Get-Item

Alias gjb -> Get-Job

Alias gl -> Get-Location

Alias gm -> Get-Member

Alias gmo -> Get-Module

Alias gp -> Get-ItemProperty

Alias gps -> Get-Process

Alias gpv -> Get-ItemPropertyValue

Alias group -> Group-Object

Alias gsn -> Get-PSSession

Alias gsnp -> Get-PSSnapin

Alias gsv -> Get-Service

Alias gu -> Get-Unique

Alias gv -> Get-Variable

Alias gwmi -> Get-WmiObject

Alias h -> Get-History

Alias history -> Get-History

Alias icm -> Invoke-Command

Alias iex -> Invoke-Expression

Alias ihy -> Invoke-History

Alias ii -> Invoke-Item

Alias ipal -> Import-Alias

Alias ipcsv -> Import-Csv

Alias ipmo -> Import-Module

Alias ipsn -> Import-PSSession

Alias irm -> Invoke-RestMethod

Alias ise -> powershell_ise.exe

Alias iwmi -> Invoke-WMIMethod

Alias iwr -> Invoke-WebRequest

Alias kill -> Stop-Process

Alias lp -> Out-Printer

Alias ls -> Get-ChildItem

Alias man -> help

Alias md -> mkdir

Alias measure -> Measure-Object

Alias mi -> Move-Item

Alias mount -> New-PSDrive

Alias move -> Move-Item

Alias mp -> Move-ItemProperty

Alias mv -> Move-Item

Alias nal -> New-Alias

Alias ndr -> New-PSDrive

Alias ni -> New-Item

Alias nmo -> New-Module

Alias npssc -> New-PSSessionConfigurationFile

Alias nsn -> New-PSSession

Alias nv -> New-Variable

Alias ogv -> Out-GridView

Alias oh -> Out-Host

Alias popd -> Pop-Location

Alias ps -> Get-Process

Alias pushd -> Push-Location

Alias pwd -> Get-Location

Alias r -> Invoke-History

Alias rbp -> Remove-PSBreakpoint

Alias rcjb -> Receive-Job

Alias rcsn -> Receive-PSSession

Alias rd -> Remove-Item

Alias rdr -> Remove-PSDrive

Alias ren -> Rename-Item

Alias ri -> Remove-Item

Alias rjb -> Remove-Job

Alias rm -> Remove-Item

Alias rmdir -> Remove-Item

Alias rmo -> Remove-Module

Alias rni -> Rename-Item

Alias rnp -> Rename-ItemProperty

Alias rp -> Remove-ItemProperty

Alias rsn -> Remove-PSSession

Alias rsnp -> Remove-PSSnapin

Alias rujb -> Resume-Job

Alias rv -> Remove-Variable

Alias rvpa -> Resolve-Path

Alias rwmi -> Remove-WMIObject

Alias sajb -> Start-Job

Alias sal -> Set-Alias

Alias saps -> Start-Process

Alias sasv -> Start-Service

Alias sbp -> Set-PSBreakpoint

Alias sc -> Set-Content

Alias select -> Select-Object

Alias set -> Set-Variable

Alias shcm -> Show-Command

Alias si -> Set-Item

Alias sl -> Set-Location

Alias sleep -> Start-Sleep

Alias sls -> Select-String

Alias sort -> Sort-Object

Alias sp -> Set-ItemProperty

Alias spjb -> Stop-Job

Alias spps -> Stop-Process

Alias spsv -> Stop-Service

Alias start -> Start-Process

Alias sujb -> Suspend-Job

Alias sv -> Set-Variable

Alias swmi -> Set-WMIInstance

Alias tee -> Tee-Object

Alias trcm -> Trace-Command

Alias type -> Get-Content

Alias wget -> Invoke-WebRequest

Alias where -> Where-Object

Alias wjb -> Wait-Job

Alias write -> Write-Output

PowerShell

4. Gestión del sistema de archivos en PowerShell (nivel intermedio)

04/07/201721/04/2019

La memoria que maneja el sistema operativo tiene limitaciones importantes, dos de ellas son la escasa cantidad de información que se puede almacenar en un espacio de direcciones, la otra es la volatilidad de los datos. La solución a este problema es almacenar la información en dispositivos de almacenamiento no volátil como son los discos duros, discos ópticos, etc. El almacenamiento de la información se lleva a cabo mediante archivos (también llamados ficheros). Un archivo se define como conjunto de datos almacenados en un dispositivo de almacenamiento, un ejemplo es una imagen fotográfica que consiste en un conjunto de bits […]

PowerShell

3. Gestión del hardware en PowerShell (nivel intermedio)

03/07/201721/04/2019

El hardware es el conjunto de componentes físicos que constituyen un ordenador y que mediante conexiones con dispositivos auxiliares permiten realizar las funciones de procesamiento, almacenamiento y transferencia de datos. El procesamiento consiste en recibir datos, realizar cálculos y operaciones con los mismos, el almacenamiento consiste en almacenar datos durante un periodo de tiempo y la transferencia consiste en enviar los resultados procesados al exterior. El hardware son los elementos físicos que se pueden tocar. Sirven para realizar tareas que se resuelven mediante el software, algunos elementos hardware son: la caja donde está la placa base, el procesador, la memoria, […]

Filesystem Hardware Network Processes

WMI Classes (detailed)

13/01/201702/09/2017

Class: Description 
Win32_1394Controller: Represents the capabilities and management of a 1394 controller.
Win32_1394ControllerDevice: Relates the high-speed serial bus (IEEE 1394 Firewire) Controller and the CIM_LogicalDevice instance connected to it.
Win32_Account: Represents information about user accounts and group accounts known to the computer system running Windows.
Win32_AccountSID: Relates a security account instance with a security descriptor instance.
Win32_ACE: Represents an access control entry (ACE).
Win32_ActiveRoute: Relates the current IP4 route to the persisted IP route table.
Win32_AllocatedResource: Relates a logical device to a system resource.
Win32_AssociatedProcessorMemory: Relates a processor and its cache memory.
Win32_AutochkSetting: Represents the settings for the autocheck operation of a disk.
Win32_BaseBoard: Represents a baseboard (also known as a motherboard or system board).
Win32_BaseService: Represents executable objects that are installed in a registry database maintained by the Service Control Manager.
Win32_Battery: Represents a battery connected to the computer system.
Win32_BIOS: Represents the attributes of the computer system's basic input or output services (BIOS) that are installed on the computer.
Win32_BootConfiguration: Represents the boot configuration of a computer system running Windows.
Win32_Bus: Represents a physical bus as seen by a Windows operating system.
Win32_CacheMemory: Represents cache memory (internal and external) on a computer system.
Win32_CDROMDrive: Represents a CD-ROM drive on a computer system running Windows.
Win32_CIMLogicalDeviceCIMDataFile: Relates logical devices and data files, indicating the driver files used by the device.
Win32_ClassicCOMApplicationClasses: Relates a DCOM application and a COM component grouped under it.
Win32_ClassicCOMClass: Represents the properties of a COM component.
Win32_ClassicCOMClassSettings: Relates a COM class and the settings used to configure instances of the COM class.
Win32_ClientApplicationSetting: Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.
Win32_CollectionStatistics: Relates a managed system element collection and the class representing statistical information about the collection.
Win32_COMApplication: Represents a COM application.
Win32_COMApplicationClasses: Relates a COM component and the COM application where it resides.
Win32_COMApplicationSettings: Relates a DCOM application and its configuration settings.
Win32_COMClass: Represents the properties of a COM component.
Win32_ComClassAutoEmulator: Relates a COM class and another COM class that it automatically emulates.
Win32_ComClassEmulator: Relates two versions of a COM class.
Win32_ComponentCategory: Represents a component category.
Win32_ComputerShutdownEvent: Represents computer shutdown events.
Win32_ComputerSystem: Represents a computer system operating in a Windows environment.
Win32_ComputerSystemEvent: Represents events related to a computer system.
Win32_ComputerSystemProcessor: Relates a computer system and a processor running on that system.
Win32_ComputerSystemProduct: Represents a product.
Win32_ComputerSystemWindowsProductActivationSetting: Relates instances of Win32_ComputerSystem andWin32_WindowsProductActivation.
Win32_COMSetting: Represents the settings associated with a COM component or COM application.
Win32_ConnectionShare: Relates a shared resource on the computer and the connection made to the shared resource.
Win32_ControllerHasHub: Represents the hubs downstream from the universal serial bus (USB) controller.
Win32_CurrentProbe: Represents the properties of a current monitoring sensor (ammeter).
Win32_CurrentTime: Represents an instance in time as component seconds, minutes, day of the week, and so on.
Win32_DCOMApplication: Represents the properties of a DCOM application.
Win32_DCOMApplicationAccessAllowedSetting: Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.
Win32_DCOMApplicationLaunchAllowedSetting: Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.
Win32_DCOMApplicationSetting: Represents the settings of a DCOM application.
Win32_DependentService: Relates two interdependent base services.
Win32_Desktop: Represents the common characteristics of a user's desktop.
Win32_DesktopMonitor: Represents the type of monitor or display device attached to the computer system.
Win32_DeviceBus: Relates a system bus and a logical device using the bus.
Win32_DeviceChangeEvent: Represents device change events resulting from the addition, removal, or modification of devices on the computer system.
Win32_DeviceMemoryAddress: Represents a device memory address on a Windows system.
Win32_DeviceSettings: Relates a logical device and a setting that can be applied to it.
Win32_DFSNode: Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).
Win32_DFSNodeTarget: Represents the relationship of a DFS node to one of its targets.
Win32_DFSTarget: Represents the target of a DFS node.
Win32_Directory: Represents a directory entry on a computer system running Windows.
Win32_DirectorySpecification: Represents the directory layout for the product.
Win32_DiskDrive: Represents a physical disk drive as seen by a computer running the Windows operating system.
Win32_DiskDriveToDiskPartition: Relates a disk drive and a partition existing on it.
Win32_DiskPartition: Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.
Win32_DiskQuota: Tracks disk space usage for NTFS file system volumes.
Win32_DisplayControllerConfiguration: Represents the video adapter configuration information of a computer system running Windows. This class is obsolete. In place of this class, use the properties in the Win32_VideoController, Win32_DesktopMonitor, and CIM_VideoControllerResolution classes.
Win32_DMAChannel: Represents a direct memory access (DMA) channel on a computer system running Windows.
Win32_DriverForDevice: Relates a printer to a printer driver.
Win32_Environment: Represents an environment or system environment setting on a computer system running Windows.
Win32_Fan: Represents the properties of a fan device in the computer system.
Win32_FloppyController: Represents the capabilities and management capacity of a floppy disk drive controller.
Win32_FloppyDrive: Manages the capabilities of a floppy disk drive.
Win32_Group: Represents data about a group account.
Win32_GroupInDomain: Identifies the group accounts associated with a Windows NT domain.
Win32_GroupUser: Relates a group and an account that is a member of that group.
Win32_HeatPipe: Represents the properties of a heat pipe cooling device.
Win32_IDEController: Represents the capabilities of an Integrated Drive Electronics (IDE) controller device.
Win32_IDEControllerDevice: Association class that relates an IDE controller and the logical device.
Win32_ImplementedCategory: Relates a component category and the COM class using its interfaces.
Win32_InfraredDevice: Represents the capabilities and management of an infrared device.
Win32_IP4PersistedRouteTable: Represents persisted IP routes.
Win32_IP4RouteTable: Represents information that governs the routing of network data packets.
Win32_IP4RouteTableEvent: Represents IP route change events.
Win32_IRQResource: Represents an interrupt request line (IRQ) number on a Windows computer system.
Win32_Keyboard: Represents a keyboard installed on a computer system running Windows.
Win32_LoadOrderGroup: Represents a group of system services that define execution dependencies.
Win32_LoadOrderGroupServiceDependencies: Represents an association between a base service and a load order group that the service depends on to start running.
Win32_LoadOrderGroupServiceMembers: Relates a load order group and a base service.
Win32_LocalTime: Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.
Win32_LogicalDisk: Represents a data source that resolves to an actual local storage device on a computer system running Windows.
Win32_LogicalDiskRootDirectory: Relates a logical disk and its directory structure.
Win32_LogicalDiskToPartition: Relates a logical disk drive and the disk partition it resides on.
Win32_LogicalFileAccess: Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).
Win32_LogicalFileAuditing: Relates the security settings of a file or directory one member of its system access control list (SACL).
Win32_LogicalFileGroup: Relates the security settings of a file or directory and its group.
Win32_LogicalFileOwner: Relates the security settings of a file or directory and its owner.
Win32_LogicalFileSecuritySetting: Represents security settings for a logical file.
Win32_LogicalProgramGroup: Represents a program group in a computer system running Windows.
Win32_LogicalProgramGroupDirectory: Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.
Win32_LogicalProgramGroupItem: Represents an element contained by a Win32_ProgramGroup instance, that is not itself anotherWin32_ProgramGroup instance.
Win32_LogicalProgramGroupItemDataFile: Relates the program group items of the Start menu, and the files in which they are stored.
Win32_LogicalShareAccess: Relates the security settings of a share and one member of its DACL.
Win32_LogicalShareAuditing: Relates the security settings of a share and one member of its SACL.
Win32_LogicalShareSecuritySetting: Represents security settings for a logical file.
Win32_LogonSession: Describes the logon session or sessions associated with a user logged on to Windows.
Win32_LogonSessionMappedDisk: Represents the mapped logical disks associated with the session.
Win32_LUID: Represents a locally unique identifier (LUID)
Win32_LUIDandAttributes: Represents a LUID and its attributes.
Win32_MappedLogicalDisk: Represents network storage devices that are mapped as logical disks on the computer system running Windows.
Win32_MemoryArray: Represents the properties of the computer system memory array and mapped addresses.
Win32_MemoryArrayLocation: Relates a logical memory array and the physical memory array upon which it exists.
Win32_MemoryDevice: Represents the properties of a computer system's memory device along with its associated mapped addresses.
Win32_MemoryDeviceArray: Relates a memory device and the memory array in which it resides.
Win32_MemoryDeviceLocation: Association class that relates a memory device and the physical memory on which it exists.
Win32_MethodParameterClass: Abstract, base class that implements method parameters derived from this class.
Win32_ModuleLoadTrace: Indicates that a process has loaded a new module.
Win32_ModuleTrace: Base event for module events.
Win32_MotherboardDevice: Represents a device that contains the central components of the computer system running Windows.
Win32_NamedJobObject: Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.
Win32_NamedJobObjectActgInfo: Represents the I/O accounting information for a job object.
Win32_NamedJobObjectLimit: Represents an association between a job object and the job object limit settings.
Win32_NamedJobObjectLimitSetting: Represents the limit settings for a job object.
Win32_NamedJobObjectProcess: Relates a job object and the process contained in the job object.
Win32_NamedJobObjectSecLimit: Relates a job object and the job object security limit settings.
Win32_NamedJobObjectSecLimitSetting: Represents the security limit settings for a job object.
Win32_NamedJobObjectStatistics: Represents an association between a job object and the job object I/O accounting information class.
Win32_NetworkAdapter: Represents a network adapter on a computer system running Windows.
Win32_NetworkAdapterConfiguration: Represents the attributes and behaviors of a network adapter. The class is not guaranteed to be supported after the ratification of the Distributed Management Task Force (DMTF) CIM network specification.
Win32_NetworkAdapterSetting: Relates a network adapter and its configuration settings.
Win32_NetworkClient: Represents a network client on a computer system running Windows.
Win32_NetworkConnection: Represents an active network connection in a Windows environment.
Win32_NetworkLoginProfile: Represents the network login information of a specific user on a computer system running Windows.
Win32_NetworkProtocol: Represents a protocol and its network characteristics on a computer system running Windows.
Win32_NTDomain: Represents a Windows NT domain.
Win32_NTEventlogFile: Represents data stored in a Windows Event log file.
Win32_NTLogEvent: Represents Windows events.
Win32_NTLogEventComputer: Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.
Win32_NTLogEventLog: Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.
Win32_NTLogEventUser: Relates instances of Win32_NTLogEvent and Win32_UserAccount.
Win32_OnBoardDevice: Represents common adapter devices built into the motherboard (system board).
Win32_OperatingSystem: Represents an operating system installed on a computer system running Windows.
Win32_OperatingSystemAutochkSetting: Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.
Win32_OperatingSystemQFE: Relates an operating system and product updates applied as represented inWin32_QuickFixEngineering.
Win32_OSRecoveryConfiguration: Represents the types of information that will be gathered from memory when the operating system fails.
Win32_PageFile: Represents the file used for handling virtual memory file swapping on a Windows system.
Win32_PageFileElementSetting: Relates the initial settings of a page file and the state of those settings during normal use.
Win32_PageFileSetting: Represents the settings of a page file.
Win32_PageFileUsage: Represents the file used for handling virtual memory file swapping on a computer system running Windows.
Win32_ParallelPort: Represents the properties of a parallel port on a computer system running Windows.
Win32_PCMCIAController: Manages the capabilities of a Personal Computer Memory Card Interface Adapter (PCMCIA) controller device.
Win32_Perf: The base class for the performance counter classes Win32_PerfRawData and Win32_PerfFormattedData.
Win32_PerfFormattedData: an abstract base class for the pre-installed, calculated data classes.
Win32_PerfRawData: The abstract base class for all concrete raw performance counter classes.
Win32_PhysicalMedia: Represents any type of documentation or storage medium.
Win32_PhysicalMemory: Represents a physical memory device located on a computer as available to the operating system.
Win32_PhysicalMemoryArray: Represents details about the computer system's physical memory.
Win32_PhysicalMemoryLocation: Relates an array of physical memory and its physical memory.
Win32_PingStatus: Represents the values returned by the standard ping command.
Win32_PNPAllocatedResource: Represents an association between logical devices and system resources.
Win32_PNPDevice: Relates a device (known to Configuration Manager as a PNPEntity), and the function it performs.
Win32_PNPEntity: Represents the properties of a Plug and Play device.
Win32_PointingDevice: Represents an input device used to point to and select regions on the display of a computer system running Windows.
Win32_PortableBattery: Represents the properties of a portable battery, such as one used for a notebook computer.
Win32_PortConnector: Represents physical connection ports, such as DB-25 pin male, Centronics, and PS/2.
Win32_PortResource: Represents an I/O port on a computer system running Windows.
Win32_POTSModem: Represents the services and characteristics of a Plain Old Telephone Service (POTS) modem on a computer system running Windows.
Win32_POTSModemToSerialPort: Relates a modem and the serial port the modem uses.
Win32_PowerManagementEvent: Represents power management events resulting from power state changes.
Win32_Printer: Represents a device connected to a computer system running Windows that is capable of reproducing a visual image on a medium.
Win32_PrinterConfiguration: Defines the configuration for a printer device.
Win32_PrinterController: Relates a printer and the local device to which the printer is connected.
Win32_PrinterDriver: Represents the drivers for a Win32_Printer instance.
Win32_PrinterDriverDll: Relates a local printer and its driver file (not the driver itself).
Win32_PrinterSetting: Relates a printer and its configuration settings.
Win32_PrinterShare: Relates a local printer and the share that represents it as it is viewed over a network.
Win32_PrintJob: Represents a print job generated by a Windows-based application.
Win32_PrivilegesStatus: Represents information about the privileges required to complete an operation.
Win32_Process: Represents a sequence of events on a computer system running Windows.
Win32_Processor: Represents a device capable of interpreting a sequence of machine instructions on a computer system running Windows.
Win32_ProcessStartTrace: Indicates that a new process has started.
Win32_ProcessStartup: Represents the startup configuration of a computer system running Windows.
Win32_ProcessStopTrace: Indicates that a process has terminated.
Win32_ProcessTrace: Base event for process events.
Win32_ProgramGroupContents: Relates a program group order and an individual program group or item contained in it.
Win32_ProgramGroupOrItem: Represents a logical grouping of programs on the user's Start|Programs menu.
Win32_ProtocolBinding: Relates a system-level driver, network protocol, and network adapter.
Win32_Proxy: Contains properties and methods to query and configure an Internet connection related to WPA.
Win32_QuickFixEngineering: Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.
Win32_QuotaSetting: Contains setting information for disk quotas on a volume.
Win32_Refrigeration: Represents the properties of a refrigeration device.
Win32_Registry: Represents the system registry on a computer system running Windows.
Win32_ScheduledJob: Represents a job scheduled using the Windows schedule service.
Win32_SCSIController: Represents a small computer system interface (SCSI) controller on a computer system running Windows.
Win32_SCSIControllerDevice: Relates a SCSI controller and the logical device (disk drive) connected to it.
Win32_SecurityDescriptor: Represents a structural representation of a SECURITY_DESCRIPTOR.
Win32_SecuritySetting: Represents security settings for a managed element.
Win32_SecuritySettingAccess: Represents the rights granted and denied to a trustee for a given object.
Win32_SecuritySettingAuditing: Represents the auditing for a given trustee on a given object.
Win32_SecuritySettingGroup: Relates the security of an object and its group.
Win32_SecuritySettingOfLogicalFile: Represents security settings of a file or directory object.
Win32_SecuritySettingOfLogicalShare: Represents security settings of a shared object.
Win32_SecuritySettingOfObject: Relates an object to its security settings.
Win32_SecuritySettingOwner: Relates the security settings of an object and its owner.
Win32_SerialPort: Represents a serial port on a computer system running Windows.
Win32_SerialPortConfiguration: Represents the settings for data transmission on a Windows serial port.
Win32_SerialPortSetting: Relates a serial port and its configuration settings.
Win32_ServerConnection: Represents the connections made from a remote computer to a shared resource on the local computer.
Win32_ServerSession: Represents the sessions that are established with the local computer by users on a remote computer.
Win32_Service: Represents a service on a computer system running Windows.
Win32_SessionConnection: Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.
Win32_SessionProcess: Represents an association between a logon session and the processes associated with that session.
Win32_ShadowBy: Represents the association between a shadow copy and the provider that creates the shadow copy.
Win32_ShadowContext: Specifies how a shadow copy is to be created, queried, or deleted.
Win32_ShadowCopy: Represents a duplicate copy of the original volume at a previous time.
Win32_ShadowDiffVolumeSupport: Represents an association between a shadow copy provider and a storage volume.
Win32_ShadowFor: Represents an association between a shadow copy and the volume for which the shadow copy is created.
Win32_ShadowOn: Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowProvider: Represents a component that creates and represents volume shadow copies.
Win32_ShadowStorage: Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowVolumeSupport: Represents an association between a shadow copy provider with a supported volume.
Win32_Share: Represents a shared resource on a computer system running Windows.
Win32_ShareToDirectory: Relates a shared resource on the computer system and the directory to which it is mapped.
Win32_ShortcutFile: Represents files that are shortcuts to other files, directories, and commands.
Win32_SID: Represents an arbitrary SID.
Win32_SIDandAttributes: Represents a security identifier (SID) and its attributes.
Win32_SMBIOSMemory: Represents the capabilities and management of memory-related logical devices.
Win32_SoundDevice: Represents the properties of a sound device on a computer system running Windows.
Win32_StartupCommand: Represents a command that runs automatically when a user logs onto the computer system.
Win32_SubDirectory: Relates a directory (folder) and one of its subdirectories (subfolders).
Win32_SystemAccount: Represents a system account.
Win32_SystemBIOS: Relates a computer system (including data such as startup properties, time zones, boot configurations, or administrative passwords) and a system BIOS (services, languages, and system management properties).
Win32_SystemBootConfiguration: Relates a computer system and its boot configuration.
Win32_SystemConfigurationChangeEvent: Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).
Win32_SystemDesktop: Relates a computer system and its desktop configuration.
Win32_SystemDevices: Relates a computer system and a logical device installed on that system.
Win32_SystemDriver: Represents the system driver for a base service.
Win32_SystemDriverPNPEntity: Relates a Plug and Play device on the Windows computer system and the driver that supports the Plug and Play device.
Win32_SystemEnclosure: Represents the properties associated with a physical system enclosure.
Win32_SystemLoadOrderGroups: Relates a computer system and a load order group.
Win32_SystemMemoryResource: Represents a system memory resource on a Windows system.
Win32_SystemNetworkConnections: Relates a network connection and the computer system on which it resides.
Win32_SystemOperatingSystem: Relates a computer system and its operating system.
Win32_SystemPartitions: Relates a computer system and a disk partition on that system.
Win32_SystemProcesses: Relates a computer system and a process running on that system.
Win32_SystemProgramGroups: Relates a computer system and a logical program group.
Win32_SystemResources: Relates a system resource and the computer system it resides on.
Win32_SystemServices: Relates a computer system and a service program that exists on the system.
Win32_SystemSetting: Relates a computer system and a general setting on that system.
Win32_SystemSlot: Represents physical connection points including ports, motherboard slots and peripherals, and proprietary connections points.
Win32_SystemSystemDriver: Relates a computer system and a system driver running on that computer system.
Win32_SystemTimeZone: Relates a computer system and a time zone.
Win32_SystemTrace: Base class for all system trace events, including module, process, and thread traces.
Win32_SystemUsers: Relates a computer system and a user account on that system.
Win32_TapeDrive: Represents a tape drive on a computer system running Windows.
Win32_TCPIPPrinterPort: Represents a TCP/IP service access point.
Win32_TemperatureProbe: Represents the properties of a temperature sensor (electronic thermometer).
Win32_Thread: Represents a thread of execution.
Win32_ThreadStartTrace: Indicates a new thread has started.
Win32_ThreadStopTrace: Indicates that a thread has stopped.
Win32_ThreadTrace: Base event class for thread events.
Win32_TimeZone: Represents the time zone information for a computer system running Windows.
Win32_TokenGroups: Represents information about the group SIDs in an access token.
Win32_TokenPrivileges: Represents information about a set of privileges for an access token.
Win32_Trustee: Represents a trustee.
Win32_USBController: Manages the capabilities of a universal serial bus (USB) controller.
Win32_USBControllerDevice: Relates a USB controller and the CIM_LogicalDevice instances connected to it.
Win32_USBHub: Represents the management characteristics of a USB hub.
Win32_UserAccount: Represents information about a user account on a computer system running Windows.
Win32_UserDesktop: Relates a user account and the desktop settings that are specific to it.
Win32_UserInDomain: Relates a user account and a Windows NT domain.
Win32_UTCTime: Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24–hour clock.
Win32_VideoController: Represents the capabilities and management capacity of the video controller on a computer system running Windows.
Win32_VideoSettings: Relates a video controller and video settings that can be applied to it.
Win32_VoltageProbe: Represents the properties of a voltage sensor (electronic voltmeter).
Win32_Volume: Represents an area of storage on a hard disk.
Win32_Volume: Represents an area of storage on a hard disk.
Win32_VolumeChangeEvent: Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.
Win32_VolumeQuota: Relates a volume to the per volume quota settings.
Win32_VolumeQuotaSetting: Relates disk quota settings with a specific disk volume.
Win32_VolumeUserQuota: Relates per user quotas to quota-enabled volumes.
Win32_VolumeUserQuota: Represents a volume to the per volume quota settings.
Win32_WindowsProductActivation: Contains properties and methods related to WPA.
Win32_WMIElementSetting: Association between a service running in the Windows system, and the WMI settings it can use.
Win32_WMISetting: Contains the operational parameters for the WMI service.

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

281

Class: Description

Win32_1394Controller: Represents the capabilities and management of a 1394 controller.

Win32_1394ControllerDevice: Relates the high-speed serial bus (IEEE 1394 Firewire) Controller and the CIM_LogicalDevice instance connected to it.

Win32_Account: Represents information about user accounts and group accounts known to the computer system running Windows.

Win32_AccountSID: Relates a security account instance with a security descriptor instance.

Win32_ACE: Represents an access control entry (ACE).

Win32_ActiveRoute: Relates the current IP4 route to the persisted IP route table.

Win32_AllocatedResource: Relates a logical device to a system resource.

Win32_AssociatedProcessorMemory: Relates a processor and its cache memory.

Win32_AutochkSetting: Represents the settings for the autocheck operation of a disk.

Win32_BaseBoard: Represents a baseboard (also known as a motherboard or system board).

Win32_BaseService: Represents executable objects that are installed in a registry database maintained by the Service Control Manager.

Win32_Battery: Represents a battery connected to the computer system.

Win32_BIOS: Represents the attributes of the computer system's basic input or output services (BIOS) that are installed on the computer.

Win32_BootConfiguration: Represents the boot configuration of a computer system running Windows.

Win32_Bus: Represents a physical bus as seen by a Windows operating system.

Win32_CacheMemory: Represents cache memory (internal and external) on a computer system.

Win32_CDROMDrive: Represents a CD-ROM drive on a computer system running Windows.

Win32_CIMLogicalDeviceCIMDataFile: Relates logical devices and data files, indicating the driver files used by the device.

Win32_ClassicCOMApplicationClasses: Relates a DCOM application and a COM component grouped under it.

Win32_ClassicCOMClass: Represents the properties of a COM component.

Win32_ClassicCOMClassSettings: Relates a COM class and the settings used to configure instances of the COM class.

Win32_ClientApplicationSetting: Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.

Win32_CollectionStatistics: Relates a managed system element collection and the class representing statistical information about the collection.

Win32_COMApplication: Represents a COM application.

Win32_COMApplicationClasses: Relates a COM component and the COM application where it resides.

Win32_COMApplicationSettings: Relates a DCOM application and its configuration settings.

Win32_COMClass: Represents the properties of a COM component.

Win32_ComClassAutoEmulator: Relates a COM class and another COM class that it automatically emulates.

Win32_ComClassEmulator: Relates two versions of a COM class.

Win32_ComponentCategory: Represents a component category.

Win32_ComputerShutdownEvent: Represents computer shutdown events.

Win32_ComputerSystem: Represents a computer system operating in a Windows environment.

Win32_ComputerSystemEvent: Represents events related to a computer system.

Win32_ComputerSystemProcessor: Relates a computer system and a processor running on that system.

Win32_ComputerSystemProduct: Represents a product.

Win32_ComputerSystemWindowsProductActivationSetting: Relates instances of Win32_ComputerSystem andWin32_WindowsProductActivation.

Win32_COMSetting: Represents the settings associated with a COM component or COM application.

Win32_ConnectionShare: Relates a shared resource on the computer and the connection made to the shared resource.

Win32_ControllerHasHub: Represents the hubs downstream from the universal serial bus (USB) controller.

Win32_CurrentProbe: Represents the properties of a current monitoring sensor (ammeter).

Win32_CurrentTime: Represents an instance in time as component seconds, minutes, day of the week, and so on.

Win32_DCOMApplication: Represents the properties of a DCOM application.

Win32_DCOMApplicationAccessAllowedSetting: Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.

Win32_DCOMApplicationLaunchAllowedSetting: Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.

Win32_DCOMApplicationSetting: Represents the settings of a DCOM application.

Win32_DependentService: Relates two interdependent base services.

Win32_Desktop: Represents the common characteristics of a user's desktop.

Win32_DesktopMonitor: Represents the type of monitor or display device attached to the computer system.

Win32_DeviceBus: Relates a system bus and a logical device using the bus.

Win32_DeviceChangeEvent: Represents device change events resulting from the addition, removal, or modification of devices on the computer system.

Win32_DeviceMemoryAddress: Represents a device memory address on a Windows system.

Win32_DeviceSettings: Relates a logical device and a setting that can be applied to it.

Win32_DFSNode: Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).

Win32_DFSNodeTarget: Represents the relationship of a DFS node to one of its targets.

Win32_DFSTarget: Represents the target of a DFS node.

Win32_Directory: Represents a directory entry on a computer system running Windows.

Win32_DirectorySpecification: Represents the directory layout for the product.

Win32_DiskDrive: Represents a physical disk drive as seen by a computer running the Windows operating system.

Win32_DiskDriveToDiskPartition: Relates a disk drive and a partition existing on it.

Win32_DiskPartition: Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.

Win32_DiskQuota: Tracks disk space usage for NTFS file system volumes.

Win32_DisplayControllerConfiguration: Represents the video adapter configuration information of a computer system running Windows. This class is obsolete. In place of this class, use the properties in the Win32_VideoController, Win32_DesktopMonitor, and CIM_VideoControllerResolution classes.

Win32_DMAChannel: Represents a direct memory access (DMA) channel on a computer system running Windows.

Win32_DriverForDevice: Relates a printer to a printer driver.

Win32_Environment: Represents an environment or system environment setting on a computer system running Windows.

Win32_Fan: Represents the properties of a fan device in the computer system.

Win32_FloppyController: Represents the capabilities and management capacity of a floppy disk drive controller.

Win32_FloppyDrive: Manages the capabilities of a floppy disk drive.

Win32_Group: Represents data about a group account.

Win32_GroupInDomain: Identifies the group accounts associated with a Windows NT domain.

Win32_GroupUser: Relates a group and an account that is a member of that group.

Win32_HeatPipe: Represents the properties of a heat pipe cooling device.

Win32_IDEController: Represents the capabilities of an Integrated Drive Electronics (IDE) controller device.

Win32_IDEControllerDevice: Association class that relates an IDE controller and the logical device.

Win32_ImplementedCategory: Relates a component category and the COM class using its interfaces.

Win32_InfraredDevice: Represents the capabilities and management of an infrared device.

Win32_IP4PersistedRouteTable: Represents persisted IP routes.

Win32_IP4RouteTable: Represents information that governs the routing of network data packets.

Win32_IP4RouteTableEvent: Represents IP route change events.

Win32_IRQResource: Represents an interrupt request line (IRQ) number on a Windows computer system.

Win32_Keyboard: Represents a keyboard installed on a computer system running Windows.

Win32_LoadOrderGroup: Represents a group of system services that define execution dependencies.

Win32_LoadOrderGroupServiceDependencies: Represents an association between a base service and a load order group that the service depends on to start running.

Win32_LoadOrderGroupServiceMembers: Relates a load order group and a base service.

Win32_LocalTime: Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.

Win32_LogicalDisk: Represents a data source that resolves to an actual local storage device on a computer system running Windows.

Win32_LogicalDiskRootDirectory: Relates a logical disk and its directory structure.

Win32_LogicalDiskToPartition: Relates a logical disk drive and the disk partition it resides on.

Win32_LogicalFileAccess: Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).

Win32_LogicalFileAuditing: Relates the security settings of a file or directory one member of its system access control list (SACL).

Win32_LogicalFileGroup: Relates the security settings of a file or directory and its group.

Win32_LogicalFileOwner: Relates the security settings of a file or directory and its owner.

Win32_LogicalFileSecuritySetting: Represents security settings for a logical file.

Win32_LogicalProgramGroup: Represents a program group in a computer system running Windows.

Win32_LogicalProgramGroupDirectory: Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.

Win32_LogicalProgramGroupItem: Represents an element contained by a Win32_ProgramGroup instance, that is not itself anotherWin32_ProgramGroup instance.

Win32_LogicalProgramGroupItemDataFile: Relates the program group items of the Start menu, and the files in which they are stored.

Win32_LogicalShareAccess: Relates the security settings of a share and one member of its DACL.

Win32_LogicalShareAuditing: Relates the security settings of a share and one member of its SACL.

Win32_LogicalShareSecuritySetting: Represents security settings for a logical file.

Win32_LogonSession: Describes the logon session or sessions associated with a user logged on to Windows.

Win32_LogonSessionMappedDisk: Represents the mapped logical disks associated with the session.

Win32_LUID: Represents a locally unique identifier (LUID)

Win32_LUIDandAttributes: Represents a LUID and its attributes.

Win32_MappedLogicalDisk: Represents network storage devices that are mapped as logical disks on the computer system running Windows.

Win32_MemoryArray: Represents the properties of the computer system memory array and mapped addresses.

Win32_MemoryArrayLocation: Relates a logical memory array and the physical memory array upon which it exists.

Win32_MemoryDevice: Represents the properties of a computer system's memory device along with its associated mapped addresses.

Win32_MemoryDeviceArray: Relates a memory device and the memory array in which it resides.

Win32_MemoryDeviceLocation: Association class that relates a memory device and the physical memory on which it exists.

Win32_MethodParameterClass: Abstract, base class that implements method parameters derived from this class.

Win32_ModuleLoadTrace: Indicates that a process has loaded a new module.

Win32_ModuleTrace: Base event for module events.

Win32_MotherboardDevice: Represents a device that contains the central components of the computer system running Windows.

Win32_NamedJobObject: Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.

Win32_NamedJobObjectActgInfo: Represents the I/O accounting information for a job object.

Win32_NamedJobObjectLimit: Represents an association between a job object and the job object limit settings.

Win32_NamedJobObjectLimitSetting: Represents the limit settings for a job object.

Win32_NamedJobObjectProcess: Relates a job object and the process contained in the job object.

Win32_NamedJobObjectSecLimit: Relates a job object and the job object security limit settings.

Win32_NamedJobObjectSecLimitSetting: Represents the security limit settings for a job object.

Win32_NamedJobObjectStatistics: Represents an association between a job object and the job object I/O accounting information class.

Win32_NetworkAdapter: Represents a network adapter on a computer system running Windows.

Win32_NetworkAdapterConfiguration: Represents the attributes and behaviors of a network adapter. The class is not guaranteed to be supported after the ratification of the Distributed Management Task Force (DMTF) CIM network specification.

Win32_NetworkAdapterSetting: Relates a network adapter and its configuration settings.

Win32_NetworkClient: Represents a network client on a computer system running Windows.

Win32_NetworkConnection: Represents an active network connection in a Windows environment.

Win32_NetworkLoginProfile: Represents the network login information of a specific user on a computer system running Windows.

Win32_NetworkProtocol: Represents a protocol and its network characteristics on a computer system running Windows.

Win32_NTDomain: Represents a Windows NT domain.

Win32_NTEventlogFile: Represents data stored in a Windows Event log file.

Win32_NTLogEvent: Represents Windows events.

Win32_NTLogEventComputer: Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.

Win32_NTLogEventLog: Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.

Win32_NTLogEventUser: Relates instances of Win32_NTLogEvent and Win32_UserAccount.

Win32_OnBoardDevice: Represents common adapter devices built into the motherboard (system board).

Win32_OperatingSystem: Represents an operating system installed on a computer system running Windows.

Win32_OperatingSystemAutochkSetting: Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.

Win32_OperatingSystemQFE: Relates an operating system and product updates applied as represented inWin32_QuickFixEngineering.

Win32_OSRecoveryConfiguration: Represents the types of information that will be gathered from memory when the operating system fails.

Win32_PageFile: Represents the file used for handling virtual memory file swapping on a Windows system.

Win32_PageFileElementSetting: Relates the initial settings of a page file and the state of those settings during normal use.

Win32_PageFileSetting: Represents the settings of a page file.

Win32_PageFileUsage: Represents the file used for handling virtual memory file swapping on a computer system running Windows.

Win32_ParallelPort: Represents the properties of a parallel port on a computer system running Windows.

Win32_PCMCIAController: Manages the capabilities of a Personal Computer Memory Card Interface Adapter (PCMCIA) controller device.

Win32_Perf: The base class for the performance counter classes Win32_PerfRawData and Win32_PerfFormattedData.

Win32_PerfFormattedData: an abstract base class for the pre-installed, calculated data classes.

Win32_PerfRawData: The abstract base class for all concrete raw performance counter classes.

Win32_PhysicalMedia: Represents any type of documentation or storage medium.

Win32_PhysicalMemory: Represents a physical memory device located on a computer as available to the operating system.

Win32_PhysicalMemoryArray: Represents details about the computer system's physical memory.

Win32_PhysicalMemoryLocation: Relates an array of physical memory and its physical memory.

Win32_PingStatus: Represents the values returned by the standard ping command.

Win32_PNPAllocatedResource: Represents an association between logical devices and system resources.

Win32_PNPDevice: Relates a device (known to Configuration Manager as a PNPEntity), and the function it performs.

Win32_PNPEntity: Represents the properties of a Plug and Play device.

Win32_PointingDevice: Represents an input device used to point to and select regions on the display of a computer system running Windows.

Win32_PortableBattery: Represents the properties of a portable battery, such as one used for a notebook computer.

Win32_PortConnector: Represents physical connection ports, such as DB-25 pin male, Centronics, and PS/2.

Win32_PortResource: Represents an I/O port on a computer system running Windows.

Win32_POTSModem: Represents the services and characteristics of a Plain Old Telephone Service (POTS) modem on a computer system running Windows.

Win32_POTSModemToSerialPort: Relates a modem and the serial port the modem uses.

Win32_PowerManagementEvent: Represents power management events resulting from power state changes.

Win32_Printer: Represents a device connected to a computer system running Windows that is capable of reproducing a visual image on a medium.

Win32_PrinterConfiguration: Defines the configuration for a printer device.

Win32_PrinterController: Relates a printer and the local device to which the printer is connected.

Win32_PrinterDriver: Represents the drivers for a Win32_Printer instance.

Win32_PrinterDriverDll: Relates a local printer and its driver file (not the driver itself).

Win32_PrinterSetting: Relates a printer and its configuration settings.

Win32_PrinterShare: Relates a local printer and the share that represents it as it is viewed over a network.

Win32_PrintJob: Represents a print job generated by a Windows-based application.

Win32_PrivilegesStatus: Represents information about the privileges required to complete an operation.

Win32_Process: Represents a sequence of events on a computer system running Windows.

Win32_Processor: Represents a device capable of interpreting a sequence of machine instructions on a computer system running Windows.

Win32_ProcessStartTrace: Indicates that a new process has started.

Win32_ProcessStartup: Represents the startup configuration of a computer system running Windows.

Win32_ProcessStopTrace: Indicates that a process has terminated.

Win32_ProcessTrace: Base event for process events.

Win32_ProgramGroupContents: Relates a program group order and an individual program group or item contained in it.

Win32_ProgramGroupOrItem: Represents a logical grouping of programs on the user's Start|Programs menu.

Win32_ProtocolBinding: Relates a system-level driver, network protocol, and network adapter.

Win32_Proxy: Contains properties and methods to query and configure an Internet connection related to WPA.

Win32_QuickFixEngineering: Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.

Win32_QuotaSetting: Contains setting information for disk quotas on a volume.

Win32_Refrigeration: Represents the properties of a refrigeration device.

Win32_Registry: Represents the system registry on a computer system running Windows.

Win32_ScheduledJob: Represents a job scheduled using the Windows schedule service.

Win32_SCSIController: Represents a small computer system interface (SCSI) controller on a computer system running Windows.

Win32_SCSIControllerDevice: Relates a SCSI controller and the logical device (disk drive) connected to it.

Win32_SecurityDescriptor: Represents a structural representation of a SECURITY_DESCRIPTOR.

Win32_SecuritySetting: Represents security settings for a managed element.

Win32_SecuritySettingAccess: Represents the rights granted and denied to a trustee for a given object.

Win32_SecuritySettingAuditing: Represents the auditing for a given trustee on a given object.

Win32_SecuritySettingGroup: Relates the security of an object and its group.

Win32_SecuritySettingOfLogicalFile: Represents security settings of a file or directory object.

Win32_SecuritySettingOfLogicalShare: Represents security settings of a shared object.

Win32_SecuritySettingOfObject: Relates an object to its security settings.

Win32_SecuritySettingOwner: Relates the security settings of an object and its owner.

Win32_SerialPort: Represents a serial port on a computer system running Windows.

Win32_SerialPortConfiguration: Represents the settings for data transmission on a Windows serial port.

Win32_SerialPortSetting: Relates a serial port and its configuration settings.

Win32_ServerConnection: Represents the connections made from a remote computer to a shared resource on the local computer.

Win32_ServerSession: Represents the sessions that are established with the local computer by users on a remote computer.

Win32_Service: Represents a service on a computer system running Windows.

Win32_SessionConnection: Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.

Win32_SessionProcess: Represents an association between a logon session and the processes associated with that session.

Win32_ShadowBy: Represents the association between a shadow copy and the provider that creates the shadow copy.

Win32_ShadowContext: Specifies how a shadow copy is to be created, queried, or deleted.

Win32_ShadowCopy: Represents a duplicate copy of the original volume at a previous time.

Win32_ShadowDiffVolumeSupport: Represents an association between a shadow copy provider and a storage volume.

Win32_ShadowFor: Represents an association between a shadow copy and the volume for which the shadow copy is created.

Win32_ShadowOn: Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowProvider: Represents a component that creates and represents volume shadow copies.

Win32_ShadowStorage: Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowVolumeSupport: Represents an association between a shadow copy provider with a supported volume.

Win32_Share: Represents a shared resource on a computer system running Windows.

Win32_ShareToDirectory: Relates a shared resource on the computer system and the directory to which it is mapped.

Win32_ShortcutFile: Represents files that are shortcuts to other files, directories, and commands.

Win32_SID: Represents an arbitrary SID.

Win32_SIDandAttributes: Represents a security identifier (SID) and its attributes.

Win32_SMBIOSMemory: Represents the capabilities and management of memory-related logical devices.

Win32_SoundDevice: Represents the properties of a sound device on a computer system running Windows.

Win32_StartupCommand: Represents a command that runs automatically when a user logs onto the computer system.

Win32_SubDirectory: Relates a directory (folder) and one of its subdirectories (subfolders).

Win32_SystemAccount: Represents a system account.

Win32_SystemBIOS: Relates a computer system (including data such as startup properties, time zones, boot configurations, or administrative passwords) and a system BIOS (services, languages, and system management properties).

Win32_SystemBootConfiguration: Relates a computer system and its boot configuration.

Win32_SystemConfigurationChangeEvent: Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).

Win32_SystemDesktop: Relates a computer system and its desktop configuration.

Win32_SystemDevices: Relates a computer system and a logical device installed on that system.

Win32_SystemDriver: Represents the system driver for a base service.

Win32_SystemDriverPNPEntity: Relates a Plug and Play device on the Windows computer system and the driver that supports the Plug and Play device.

Win32_SystemEnclosure: Represents the properties associated with a physical system enclosure.

Win32_SystemLoadOrderGroups: Relates a computer system and a load order group.

Win32_SystemMemoryResource: Represents a system memory resource on a Windows system.

Win32_SystemNetworkConnections: Relates a network connection and the computer system on which it resides.

Win32_SystemOperatingSystem: Relates a computer system and its operating system.

Win32_SystemPartitions: Relates a computer system and a disk partition on that system.

Win32_SystemProcesses: Relates a computer system and a process running on that system.

Win32_SystemProgramGroups: Relates a computer system and a logical program group.

Win32_SystemResources: Relates a system resource and the computer system it resides on.

Win32_SystemServices: Relates a computer system and a service program that exists on the system.

Win32_SystemSetting: Relates a computer system and a general setting on that system.

Win32_SystemSlot: Represents physical connection points including ports, motherboard slots and peripherals, and proprietary connections points.

Win32_SystemSystemDriver: Relates a computer system and a system driver running on that computer system.

Win32_SystemTimeZone: Relates a computer system and a time zone.

Win32_SystemTrace: Base class for all system trace events, including module, process, and thread traces.

Win32_SystemUsers: Relates a computer system and a user account on that system.

Win32_TapeDrive: Represents a tape drive on a computer system running Windows.

Win32_TCPIPPrinterPort: Represents a TCP/IP service access point.

Win32_TemperatureProbe: Represents the properties of a temperature sensor (electronic thermometer).

Win32_Thread: Represents a thread of execution.

Win32_ThreadStartTrace: Indicates a new thread has started.

Win32_ThreadStopTrace: Indicates that a thread has stopped.

Win32_ThreadTrace: Base event class for thread events.

Win32_TimeZone: Represents the time zone information for a computer system running Windows.

Win32_TokenGroups: Represents information about the group SIDs in an access token.

Win32_TokenPrivileges: Represents information about a set of privileges for an access token.

Win32_Trustee: Represents a trustee.

Win32_USBController: Manages the capabilities of a universal serial bus (USB) controller.

Win32_USBControllerDevice: Relates a USB controller and the CIM_LogicalDevice instances connected to it.

Win32_USBHub: Represents the management characteristics of a USB hub.

Win32_UserAccount: Represents information about a user account on a computer system running Windows.

Win32_UserDesktop: Relates a user account and the desktop settings that are specific to it.

Win32_UserInDomain: Relates a user account and a Windows NT domain.

Win32_UTCTime: Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24–hour clock.

Win32_VideoController: Represents the capabilities and management capacity of the video controller on a computer system running Windows.

Win32_VideoSettings: Relates a video controller and video settings that can be applied to it.

Win32_VoltageProbe: Represents the properties of a voltage sensor (electronic voltmeter).

Win32_Volume: Represents an area of storage on a hard disk.

Win32_VolumeChangeEvent: Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.

Win32_VolumeQuota: Relates a volume to the per volume quota settings.

Win32_VolumeQuotaSetting: Relates disk quota settings with a specific disk volume.

Win32_VolumeUserQuota: Relates per user quotas to quota-enabled volumes.

Win32_VolumeUserQuota: Represents a volume to the per volume quota settings.

Win32_WindowsProductActivation: Contains properties and methods related to WPA.

Win32_WMIElementSetting: Association between a service running in the Windows system, and the WMI settings it can use.

Win32_WMISetting: Contains the operational parameters for the WMI service.

Filesystem Hardware Network Processes

Win32 Classes (Windows)

01/01/201702/09/2017

Win32_1394Controller
Win32_1394ControllerDevice
Win32_Account
Win32_AccountSID
Win32_ACE
Win32_ActiveRoute
Win32_AllocatedResource
Win32_AssociatedProcessorMemory
Win32_AutochkSetting
Win32_BaseBoard
Win32_BaseService
Win32_Battery
Win32_BIOS
Win32_BootConfiguration
Win32_Bus
Win32_CacheMemory
Win32_CDROMDrive
Win32_CIMLogicalDeviceCIMDataFile
Win32_ClassicCOMApplicationClasses
Win32_ClassicCOMClass
Win32_ClassicCOMClassSettings
Win32_ClientApplicationSetting
Win32_CollectionStatistics
Win32_COMApplication
Win32_COMApplicationClasses
Win32_COMApplicationSettings
Win32_COMClass
Win32_ComClassAutoEmulator
Win32_ComClassEmulator
Win32_ComponentCategory
Win32_ComputerShutdownEvent
Win32_ComputerSystem
Win32_ComputerSystemEvent
Win32_ComputerSystemProcessor
Win32_ComputerSystemProduct
Win32_ComputerSystemWindowsProductActivationSetting
Win32_COMSetting
Win32_ConnectionShare
Win32_ControllerHasHub
Win32_CurrentProbe
Win32_CurrentTime
Win32_DCOMApplication
Win32_DCOMApplicationAccessAllowedSetting
Win32_DCOMApplicationLaunchAllowedSetting
Win32_DCOMApplicationSetting
Win32_DependentService
Win32_Desktop
Win32_DesktopMonitor
Win32_DeviceBus
Win32_DeviceChangeEvent
Win32_DeviceMemoryAddress
Win32_DeviceSettings
Win32_DFSNode
Win32_DFSNodeTarget
Win32_DFSTarget
Win32_Directory
Win32_DirectorySpecification
Win32_DiskDrive
Win32_DiskDriveToDiskPartition
Win32_DiskPartition
Win32_DiskQuota
Win32_DisplayControllerConfiguration
Win32_DMAChannel
Win32_DriverForDevice
Win32_Environment
Win32_Fan
Win32_FloppyController
Win32_FloppyDrive
Win32_Group
Win32_GroupInDomain
Win32_GroupUser
Win32_HeatPipe
Win32_IDEController
Win32_IDEControllerDevice
Win32_ImplementedCategory
Win32_InfraredDevice
Win32_IP4PersistedRouteTable
Win32_IP4RouteTable
Win32_IP4RouteTableEvent
Win32_IRQResource
Win32_Keyboard
Win32_LoadOrderGroup
Win32_LoadOrderGroupServiceDependencies
Win32_LoadOrderGroupServiceMembers
Win32_LocalTime
Win32_LogicalDisk
Win32_LogicalDiskRootDirectory
Win32_LogicalDiskToPartition
Win32_LogicalFileAccess
Win32_LogicalFileAuditing
Win32_LogicalFileGroup
Win32_LogicalFileOwner
Win32_LogicalFileSecuritySetting
Win32_LogicalProgramGroup
Win32_LogicalProgramGroupDirectory
Win32_LogicalProgramGroupItem
Win32_LogicalProgramGroupItemDataFile
Win32_LogicalShareAccess
Win32_LogicalShareAuditing
Win32_LogicalShareSecuritySetting
Win32_LogonSession
Win32_LogonSessionMappedDisk
Win32_LUID
Win32_LUIDandAttributes
Win32_MappedLogicalDisk
Win32_MemoryArray
Win32_MemoryArrayLocation
Win32_MemoryDevice
Win32_MemoryDeviceArray
Win32_MemoryDeviceLocation
Win32_MethodParameterClass
Win32_ModuleLoadTrace
Win32_ModuleTrace
Win32_MotherboardDevice
Win32_NamedJobObject
Win32_NamedJobObjectActgInfo
Win32_NamedJobObjectLimit
Win32_NamedJobObjectLimitSetting
Win32_NamedJobObjectProcess
Win32_NamedJobObjectSecLimit
Win32_NamedJobObjectSecLimitSetting
Win32_NamedJobObjectStatistics
Win32_NetworkAdapter
Win32_NetworkAdapterConfiguration
Win32_NetworkAdapterSetting
Win32_NetworkClient
Win32_NetworkConnection
Win32_NetworkLoginProfile
Win32_NetworkProtocol
Win32_NTDomain
Win32_NTEventlogFile
Win32_NTLogEvent
Win32_NTLogEventComputer
Win32_NTLogEventLog
Win32_NTLogEventUser
Win32_OnBoardDevice
Win32_OperatingSystem
Win32_OperatingSystemAutochkSetting
Win32_OperatingSystemQFE
Win32_OSRecoveryConfiguration
Win32_PageFile
Win32_PageFileElementSetting
Win32_PageFileSetting
Win32_PageFileUsage
Win32_ParallelPort
Win32_PCMCIAController
Win32_Perf
Win32_PerfFormattedData
Win32_PerfRawData
Win32_PhysicalMedia
Win32_PhysicalMemory
Win32_PhysicalMemoryArray
Win32_PhysicalMemoryLocation
Win32_PingStatus
Win32_PNPAllocatedResource
Win32_PNPDevice
Win32_PNPEntity
Win32_PointingDevice
Win32_PortableBattery
Win32_PortConnector
Win32_PortResource
Win32_POTSModem
Win32_POTSModemToSerialPort
Win32_PowerManagementEvent
Win32_Printer
Win32_PrinterConfiguration
Win32_PrinterController
Win32_PrinterDriver
Win32_PrinterDriverDll
Win32_PrinterSetting
Win32_PrinterShare
Win32_PrintJob
Win32_PrivilegesStatus
Win32_Process
Win32_Processor
Win32_ProcessStartTrace
Win32_ProcessStartup
Win32_ProcessStopTrace
Win32_ProcessTrace
Win32_ProgramGroupContents
Win32_ProgramGroupOrItem
Win32_ProtocolBinding
Win32_Proxy
Win32_QuickFixEngineering
Win32_QuotaSetting
Win32_Refrigeration
Win32_Registry
Win32_ScheduledJob
Win32_SCSIController
Win32_SCSIControllerDevice
Win32_SecurityDescriptor
Win32_SecuritySetting
Win32_SecuritySettingAccess
Win32_SecuritySettingAuditing
Win32_SecuritySettingGroup
Win32_SecuritySettingOfLogicalFile
Win32_SecuritySettingOfLogicalShare
Win32_SecuritySettingOfObject
Win32_SecuritySettingOwner
Win32_SerialPort
Win32_SerialPortConfiguration
Win32_SerialPortSetting
Win32_ServerConnection
Win32_ServerSession
Win32_Service
Win32_SessionConnection
Win32_SessionProcess
Win32_ShadowBy
Win32_ShadowContext
Win32_ShadowCopy
Win32_ShadowDiffVolumeSupport
Win32_ShadowFor
Win32_ShadowOn
Win32_ShadowProvider
Win32_ShadowStorage
Win32_ShadowVolumeSupport
Win32_Share
Win32_ShareToDirectory
Win32_ShortcutFile
Win32_SID
Win32_SIDandAttributes
Win32_SMBIOSMemory
Win32_SoundDevice
Win32_StartupCommand
Win32_SubDirectory
Win32_SystemAccount
Win32_SystemBIOS
Win32_SystemBootConfiguration
Win32_SystemConfigurationChangeEvent
Win32_SystemDesktop
Win32_SystemDevices
Win32_SystemDriver
Win32_SystemDriverPNPEntity
Win32_SystemEnclosure
Win32_SystemLoadOrderGroups
Win32_SystemMemoryResource
Win32_SystemNetworkConnections
Win32_SystemOperatingSystem
Win32_SystemPartitions
Win32_SystemProcesses
Win32_SystemProgramGroups
Win32_SystemResources
Win32_SystemServices
Win32_SystemSetting
Win32_SystemSlot
Win32_SystemSystemDriver
Win32_SystemTimeZone
Win32_SystemTrace
Win32_SystemUsers
Win32_TapeDrive
Win32_TCPIPPrinterPort
Win32_TemperatureProbe
Win32_Thread
Win32_ThreadStartTrace
Win32_ThreadStopTrace
Win32_ThreadTrace
Win32_TimeZone
Win32_TokenGroups
Win32_TokenPrivileges
Win32_Trustee
Win32_USBController
Win32_USBControllerDevice
Win32_USBHub
Win32_UserAccount
Win32_UserDesktop
Win32_UserInDomain
Win32_UTCTime
Win32_VideoController
Win32_VideoSettings
Win32_VoltageProbe
Win32_Volume
Win32_Volume
Win32_VolumeChangeEvent
Win32_VolumeQuota
Win32_VolumeQuotaSetting
Win32_VolumeUserQuota
Win32_VolumeUserQuota
Win32_WindowsProductActivation
Win32_WMIElementSetting
Win32_WMISetting

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

Win32_1394Controller

Win32_1394ControllerDevice

Win32_Account

Win32_AccountSID

Win32_ACE

Win32_ActiveRoute

Win32_AllocatedResource

Win32_AssociatedProcessorMemory

Win32_AutochkSetting

Win32_BaseBoard

Win32_BaseService

Win32_Battery

Win32_BIOS

Win32_BootConfiguration

Win32_Bus

Win32_CacheMemory

Win32_CDROMDrive

Win32_CIMLogicalDeviceCIMDataFile

Win32_ClassicCOMApplicationClasses

Win32_ClassicCOMClass

Win32_ClassicCOMClassSettings

Win32_ClientApplicationSetting

Win32_CollectionStatistics

Win32_COMApplication

Win32_COMApplicationClasses

Win32_COMApplicationSettings

Win32_COMClass

Win32_ComClassAutoEmulator

Win32_ComClassEmulator

Win32_ComponentCategory

Win32_ComputerShutdownEvent

Win32_ComputerSystem

Win32_ComputerSystemEvent

Win32_ComputerSystemProcessor

Win32_ComputerSystemProduct

Win32_ComputerSystemWindowsProductActivationSetting

Win32_COMSetting

Win32_ConnectionShare

Win32_ControllerHasHub

Win32_CurrentProbe

Win32_CurrentTime

Win32_DCOMApplication

Win32_DCOMApplicationAccessAllowedSetting

Win32_DCOMApplicationLaunchAllowedSetting

Win32_DCOMApplicationSetting

Win32_DependentService

Win32_Desktop

Win32_DesktopMonitor

Win32_DeviceBus

Win32_DeviceChangeEvent

Win32_DeviceMemoryAddress

Win32_DeviceSettings

Win32_DFSNode

Win32_DFSNodeTarget

Win32_DFSTarget

Win32_Directory

Win32_DirectorySpecification

Win32_DiskDrive

Win32_DiskDriveToDiskPartition

Win32_DiskPartition

Win32_DiskQuota

Win32_DisplayControllerConfiguration

Win32_DMAChannel

Win32_DriverForDevice

Win32_Environment

Win32_Fan

Win32_FloppyController

Win32_FloppyDrive

Win32_Group

Win32_GroupInDomain

Win32_GroupUser

Win32_HeatPipe

Win32_IDEController

Win32_IDEControllerDevice

Win32_ImplementedCategory

Win32_InfraredDevice

Win32_IP4PersistedRouteTable

Win32_IP4RouteTable

Win32_IP4RouteTableEvent

Win32_IRQResource

Win32_Keyboard

Win32_LoadOrderGroup

Win32_LoadOrderGroupServiceDependencies

Win32_LoadOrderGroupServiceMembers

Win32_LocalTime

Win32_LogicalDisk

Win32_LogicalDiskRootDirectory

Win32_LogicalDiskToPartition

Win32_LogicalFileAccess

Win32_LogicalFileAuditing

Win32_LogicalFileGroup

Win32_LogicalFileOwner

Win32_LogicalFileSecuritySetting

Win32_LogicalProgramGroup

Win32_LogicalProgramGroupDirectory

Win32_LogicalProgramGroupItem

Win32_LogicalProgramGroupItemDataFile

Win32_LogicalShareAccess

Win32_LogicalShareAuditing

Win32_LogicalShareSecuritySetting

Win32_LogonSession

Win32_LogonSessionMappedDisk

Win32_LUID

Win32_LUIDandAttributes

Win32_MappedLogicalDisk

Win32_MemoryArray

Win32_MemoryArrayLocation

Win32_MemoryDevice

Win32_MemoryDeviceArray

Win32_MemoryDeviceLocation

Win32_MethodParameterClass

Win32_ModuleLoadTrace

Win32_ModuleTrace

Win32_MotherboardDevice

Win32_NamedJobObject

Win32_NamedJobObjectActgInfo

Win32_NamedJobObjectLimit

Win32_NamedJobObjectLimitSetting

Win32_NamedJobObjectProcess

Win32_NamedJobObjectSecLimit

Win32_NamedJobObjectSecLimitSetting

Win32_NamedJobObjectStatistics

Win32_NetworkAdapter

Win32_NetworkAdapterConfiguration

Win32_NetworkAdapterSetting

Win32_NetworkClient

Win32_NetworkConnection

Win32_NetworkLoginProfile

Win32_NetworkProtocol

Win32_NTDomain

Win32_NTEventlogFile

Win32_NTLogEvent

Win32_NTLogEventComputer

Win32_NTLogEventLog

Win32_NTLogEventUser

Win32_OnBoardDevice

Win32_OperatingSystem

Win32_OperatingSystemAutochkSetting

Win32_OperatingSystemQFE

Win32_OSRecoveryConfiguration

Win32_PageFile

Win32_PageFileElementSetting

Win32_PageFileSetting

Win32_PageFileUsage

Win32_ParallelPort

Win32_PCMCIAController

Win32_Perf

Win32_PerfFormattedData

Win32_PerfRawData

Win32_PhysicalMedia

Win32_PhysicalMemory

Win32_PhysicalMemoryArray

Win32_PhysicalMemoryLocation

Win32_PingStatus

Win32_PNPAllocatedResource

Win32_PNPDevice

Win32_PNPEntity

Win32_PointingDevice

Win32_PortableBattery

Win32_PortConnector

Win32_PortResource

Win32_POTSModem

Win32_POTSModemToSerialPort

Win32_PowerManagementEvent

Win32_Printer

Win32_PrinterConfiguration

Win32_PrinterController

Win32_PrinterDriver

Win32_PrinterDriverDll

Win32_PrinterSetting

Win32_PrinterShare

Win32_PrintJob

Win32_PrivilegesStatus

Win32_Process

Win32_Processor

Win32_ProcessStartTrace

Win32_ProcessStartup

Win32_ProcessStopTrace

Win32_ProcessTrace

Win32_ProgramGroupContents

Win32_ProgramGroupOrItem

Win32_ProtocolBinding

Win32_Proxy

Win32_QuickFixEngineering

Win32_QuotaSetting

Win32_Refrigeration

Win32_Registry

Win32_ScheduledJob

Win32_SCSIController

Win32_SCSIControllerDevice

Win32_SecurityDescriptor

Win32_SecuritySetting

Win32_SecuritySettingAccess

Win32_SecuritySettingAuditing

Win32_SecuritySettingGroup

Win32_SecuritySettingOfLogicalFile

Win32_SecuritySettingOfLogicalShare

Win32_SecuritySettingOfObject

Win32_SecuritySettingOwner

Win32_SerialPort

Win32_SerialPortConfiguration

Win32_SerialPortSetting

Win32_ServerConnection

Win32_ServerSession

Win32_Service

Win32_SessionConnection

Win32_SessionProcess

Win32_ShadowBy

Win32_ShadowContext

Win32_ShadowCopy

Win32_ShadowDiffVolumeSupport

Win32_ShadowFor

Win32_ShadowOn

Win32_ShadowProvider

Win32_ShadowStorage

Win32_ShadowVolumeSupport

Win32_Share

Win32_ShareToDirectory

Win32_ShortcutFile

Win32_SID

Win32_SIDandAttributes

Win32_SMBIOSMemory

Win32_SoundDevice

Win32_StartupCommand

Win32_SubDirectory

Win32_SystemAccount

Win32_SystemBIOS

Win32_SystemBootConfiguration

Win32_SystemConfigurationChangeEvent

Win32_SystemDesktop

Win32_SystemDevices

Win32_SystemDriver

Win32_SystemDriverPNPEntity

Win32_SystemEnclosure

Win32_SystemLoadOrderGroups

Win32_SystemMemoryResource

Win32_SystemNetworkConnections

Win32_SystemOperatingSystem

Win32_SystemPartitions

Win32_SystemProcesses

Win32_SystemProgramGroups

Win32_SystemResources

Win32_SystemServices

Win32_SystemSetting

Win32_SystemSlot

Win32_SystemSystemDriver

Win32_SystemTimeZone

Win32_SystemTrace

Win32_SystemUsers

Win32_TapeDrive

Win32_TCPIPPrinterPort

Win32_TemperatureProbe

Win32_Thread

Win32_ThreadStartTrace

Win32_ThreadStopTrace

Win32_ThreadTrace

Win32_TimeZone

Win32_TokenGroups

Win32_TokenPrivileges

Win32_Trustee

Win32_USBController

Win32_USBControllerDevice

Win32_USBHub

Win32_UserAccount

Win32_UserDesktop

Win32_UserInDomain

Win32_UTCTime

Win32_VideoController

Win32_VideoSettings

Win32_VoltageProbe

Win32_Volume

Win32_VolumeChangeEvent

Win32_VolumeQuota

Win32_VolumeQuotaSetting

Win32_VolumeUserQuota

Win32_WindowsProductActivation

Win32_WMIElementSetting

Win32_WMISetting

Filesystem PowerShell

Crear un dispositivo USB “booteable” desde Powershell

05/12/201620/01/2017

#Realizado por Adrián García
Mount-DiskImage –ImagePath “C:\Users\adria\Desktop\Carpeta\Win10 Pro.iso”
Get-Disk
Clear-Disk –Number 1 -RemoveData
New-Partition -DiskNumber 1 -UseMaximumSize -AssignDriveLetter -IsActive:$true
Format-Volume –FileSystem NTFS –DriveLetter D
bootsect.exe /NT60 D:
Copy-Item –Recurse F:\* D:\

#Realizado por Adrián García

Mount-DiskImage –ImagePath “C:\Users\adria\Desktop\Carpeta\Win10 Pro.iso”

Get-Disk

Clear-Disk –Number 1 -RemoveData

New-Partition -DiskNumber 1 -UseMaximumSize -AssignDriveLetter -IsActive:$true

Format-Volume –FileSystem NTFS –DriveLetter D

bootsect.exe /NT60 D:

Copy-Item –Recurse F:\* D:\

PowerShell

10. Gestión del rendimiento en PowerShell para administradores de sistemas (nivel básico)

16/11/201602/06/2018

Para no tener que recurrir a la restauración de copias de seguridad o reparación del sistema operativo, hay que detectar los problemas antes de que ocurran. Rendimiento En general los cmdlets que se encargan de analizar el rendimiento son: Información sobre los procesos y servicios que se ejecutan en el sistema. Eventos del sistema, que son acontecimientos que ocurren en el sistema operativo. Monitor de rendimiento, que analiza el rendimiento del sistema operativo. Tiene control de la CPU, el disco, la red y la memoria. Monitorizar procesos

Get-Process
gps
ps
Get-WmiObject -Class win32_process

Get-Process

gps

Get-WmiObject -Class win32_process

Eventos del sistema

Get-EventLog

1	Get-EventLog

Ver todos los nombres de los contadores de […]

Older Posts