Directory | Scripting and security

WINDOWS SERVER 2012 RC . CONFIGURACIÓN DE SERVICIOS AVANZADOS (ASIMANE, ARMELIN)

(No Ratings Yet)

WINDOWS SERVER 2016. LAS BASES IMPRESCINDIBLES PARA ADMINISTRAS Y CONFIGURAR SU SERVIDOR (BONNET, NICOLAS)

(No Ratings Yet)

WINDOWS SERVER 2012 R2 . INSTALACION Y CONFIGURACION (BONNET, NICOLAS)

(No Ratings Yet)

WINDOWS SERVER 2012 R2 (PACK 2 LIBROS) . INSTALACIÓN Y CONFIGURACIÓN Y ADMINISTRACIÓN (BONNET, NICOLAS)

(No Ratings Yet)

Find top 10 largest files in /var directory (including subdirectories) with WSL

(1 votes, average: 5.00 out of 5)

bash -c "find /var -type f -exec du -h {} \; | sort -rh | head -10"

1	bash -c "find /var -type f -exec du -h {} \; \| sort -rh \| head -10"

Leer el contenido de una página web utilizando PHP desde PowerShell

(1 votes, average: 5.00 out of 5)

cd C:\xampp\php

'<?php $url = "https://www.jesusninoc.com/2018/06/09/verificar-la-hora-del-ultimo-inicio-de-sesion-de-los-usuarios-del-active-directory/";
$web= file_get_contents($url);
echo $web;?>' | .\php.exe

cd C:\xampp\php

'<?php $url = "https://www.jesusninoc.com/2018/06/09/verificar-la-hora-del-ultimo-inicio-de-sesion-de-los-usuarios-del-active-directory/";

$web= file_get_contents($url);

echo $web;?>' | .\php.exe

Utilizar un filtro LDAP para verificar la hora del último inicio de sesión de los usuarios del Active Directory

(1 votes, average: 5.00 out of 5)

$SAMAccountName = "jesus*"
Get-ADUser -LDAPFilter "(samaccountname=$SAMAccountName)" | %{
    ($_ | Get-ADObject -Properties lastLogon).lastlogon
    $dt = [DateTime]::FromFileTime(($_ | Get-ADObject -Properties lastLogon).lastlogon)
    Write-Host $_ "last logged on at:" $dt
}

$SAMAccountName = "jesus*"

Get-ADUser -LDAPFilter "(samaccountname=$SAMAccountName)" | %{

($_ | Get-ADObject -Properties lastLogon).lastlogon

$dt = [DateTime]::FromFileTime(($_ | Get-ADObject -Properties lastLogon).lastlogon)

Write-Host $_ "last logged on at:" $dt

}

forkstat

(No Ratings Yet)

Forkstat is a program that logs process fork(), exec() and exit() activity. It is useful for monitoring system behaviour and […]

How to make an offline mirror copy of a website with WSL (Windows Subsystem for Linux)?

(1 votes, average: 5.00 out of 5)

bash -c "wget --mirror --convert-links --html-extension --wait=2 -o log https://www.jesusninoc.com"

1	bash -c "wget --mirror --convert-links --html-extension --wait=2 -o log https://www.jesusninoc.com"

--mirror
    Turn on options suitable for mirroring. This option turns on 
    recursion and time-stamping, sets infinite recursion depth,
    and keeps FTP directory listings. It is currently equivalent to 
    ‘-r -N -l inf --no-remove-listing’. 

--convert-links
    After the download is complete, convert the links in the document
    to make them suitable for local viewing.

--html-extension

-o foo
    write "log" output to a file named "foo"

--wait=seconds
    Wait the specified number of seconds between the retrievals.
    Use of this option is recommended, as it lightens the server load 
    by making the requests less frequent.

--mirror

Turn on options suitable for mirroring. This option turns on

recursion and time-stamping, sets infinite recursion depth,

and keeps FTP directory listings. It is currently equivalent to

‘-r -N -l inf --no-remove-listing’.

--convert-links

After the download is complete, convert the links in the document

to make them suitable for local viewing.

--html-extension

-o foo

write "log" output to a file named "foo"

--wait=seconds

Wait the specified number of seconds between the retrievals.

Use of this option is recommended, as it lightens the server load

by making the requests less frequent.

Verificar la hora del último inicio de sesión de los usuarios del Active Directory

(2 votes, average: 5.00 out of 5)

Get-ADUser -Filter 'Name -like "*user*"' | %{
    ($_ | Get-ADObject -Properties lastLogon).lastlogon
    $dt = [DateTime]::FromFileTime(($_ | Get-ADObject -Properties lastLogon).lastlogon)
    Write-Host $_ "last logged on at:" $dt
}

Get-ADUser -Filter 'Name -like "*user*"' | %{

($_ | Get-ADObject -Properties lastLogon).lastlogon

$dt = [DateTime]::FromFileTime(($_ | Get-ADObject -Properties lastLogon).lastlogon)

Write-Host $_ "last logged on at:" $dt

}

Dejavu: audio fingerprinting and recognition in Python

(6 votes, average: 3.17 out of 5)

Audio fingerprinting and recognition algorithm implemented in Python, see the explanation here: How it works Dejavu can memorize audio by […]

VoTT: Visual Object Tagging Tool

(No Ratings Yet)

This tool provides end to end support for generating datasets and validating object detection models from video and image assets. […]

8. Gestión de usuarios en PowerShell (nivel intermedio)

(18 votes, average: 2.78 out of 5)

Los sistemas operativos actuales se pueden utilizar por uno o varios usuarios, en algunos sistemas pueden hacerlo simultáneamente y en […]

7. Gestión de procesos en PowerShell (nivel intermedio)

(10 votes, average: 4.70 out of 5)

Uno de los conceptos más importantes en los sistemas operativos es el proceso que se define como un programa en […]

4. Gestión del sistema de archivos en PowerShell (nivel intermedio)

(6 votes, average: 4.33 out of 5)

La memoria que maneja el sistema operativo tiene limitaciones importantes, dos de ellas son la escasa cantidad de información que […]

Capture a Network Trace without installing anything

(1 votes, average: 4.00 out of 5)

1. Open an elevated command prompt and run:

netsh trace start persistent=yes capture=yes tracefile=c:\fichero.etl

1	netsh trace start persistent=yes capture=yes tracefile=c:\fichero.etl

2. Reproduce the issue or do a reboot if you are […]

Pasos para configurar Bash Bunny en español

(1 votes, average: 5.00 out of 5)

Configuración inicial Descargar los últimos payloads desde GitHub https://github.com/hak5/bashbunny-payloads Conectar Bash Bunny en modo Arming Mode (“Switch Position 3: Arming […]

PowerShell en la filtración de WikiLeaks (Vault 7: CIA Hacking Tools Revealed)

(1 votes, average: 1.00 out of 5)

PowerShell Notes Create and Modify Your Powershell Profile First check whether or not your profile exists. Test-Path $profile If the […]

WMI Classes (detailed)

(No Ratings Yet)

Class: Description 
Win32_1394Controller: Represents the capabilities and management of a 1394 controller.
Win32_1394ControllerDevice: Relates the high-speed serial bus (IEEE 1394 Firewire) Controller and the CIM_LogicalDevice instance connected to it.
Win32_Account: Represents information about user accounts and group accounts known to the computer system running Windows.
Win32_AccountSID: Relates a security account instance with a security descriptor instance.
Win32_ACE: Represents an access control entry (ACE).
Win32_ActiveRoute: Relates the current IP4 route to the persisted IP route table.
Win32_AllocatedResource: Relates a logical device to a system resource.
Win32_AssociatedProcessorMemory: Relates a processor and its cache memory.
Win32_AutochkSetting: Represents the settings for the autocheck operation of a disk.
Win32_BaseBoard: Represents a baseboard (also known as a motherboard or system board).
Win32_BaseService: Represents executable objects that are installed in a registry database maintained by the Service Control Manager.
Win32_Battery: Represents a battery connected to the computer system.
Win32_BIOS: Represents the attributes of the computer system's basic input or output services (BIOS) that are installed on the computer.
Win32_BootConfiguration: Represents the boot configuration of a computer system running Windows.
Win32_Bus: Represents a physical bus as seen by a Windows operating system.
Win32_CacheMemory: Represents cache memory (internal and external) on a computer system.
Win32_CDROMDrive: Represents a CD-ROM drive on a computer system running Windows.
Win32_CIMLogicalDeviceCIMDataFile: Relates logical devices and data files, indicating the driver files used by the device.
Win32_ClassicCOMApplicationClasses: Relates a DCOM application and a COM component grouped under it.
Win32_ClassicCOMClass: Represents the properties of a COM component.
Win32_ClassicCOMClassSettings: Relates a COM class and the settings used to configure instances of the COM class.
Win32_ClientApplicationSetting: Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.
Win32_CollectionStatistics: Relates a managed system element collection and the class representing statistical information about the collection.
Win32_COMApplication: Represents a COM application.
Win32_COMApplicationClasses: Relates a COM component and the COM application where it resides.
Win32_COMApplicationSettings: Relates a DCOM application and its configuration settings.
Win32_COMClass: Represents the properties of a COM component.
Win32_ComClassAutoEmulator: Relates a COM class and another COM class that it automatically emulates.
Win32_ComClassEmulator: Relates two versions of a COM class.
Win32_ComponentCategory: Represents a component category.
Win32_ComputerShutdownEvent: Represents computer shutdown events.
Win32_ComputerSystem: Represents a computer system operating in a Windows environment.
Win32_ComputerSystemEvent: Represents events related to a computer system.
Win32_ComputerSystemProcessor: Relates a computer system and a processor running on that system.
Win32_ComputerSystemProduct: Represents a product.
Win32_ComputerSystemWindowsProductActivationSetting: Relates instances of Win32_ComputerSystem andWin32_WindowsProductActivation.
Win32_COMSetting: Represents the settings associated with a COM component or COM application.
Win32_ConnectionShare: Relates a shared resource on the computer and the connection made to the shared resource.
Win32_ControllerHasHub: Represents the hubs downstream from the universal serial bus (USB) controller.
Win32_CurrentProbe: Represents the properties of a current monitoring sensor (ammeter).
Win32_CurrentTime: Represents an instance in time as component seconds, minutes, day of the week, and so on.
Win32_DCOMApplication: Represents the properties of a DCOM application.
Win32_DCOMApplicationAccessAllowedSetting: Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.
Win32_DCOMApplicationLaunchAllowedSetting: Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.
Win32_DCOMApplicationSetting: Represents the settings of a DCOM application.
Win32_DependentService: Relates two interdependent base services.
Win32_Desktop: Represents the common characteristics of a user's desktop.
Win32_DesktopMonitor: Represents the type of monitor or display device attached to the computer system.
Win32_DeviceBus: Relates a system bus and a logical device using the bus.
Win32_DeviceChangeEvent: Represents device change events resulting from the addition, removal, or modification of devices on the computer system.
Win32_DeviceMemoryAddress: Represents a device memory address on a Windows system.
Win32_DeviceSettings: Relates a logical device and a setting that can be applied to it.
Win32_DFSNode: Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).
Win32_DFSNodeTarget: Represents the relationship of a DFS node to one of its targets.
Win32_DFSTarget: Represents the target of a DFS node.
Win32_Directory: Represents a directory entry on a computer system running Windows.
Win32_DirectorySpecification: Represents the directory layout for the product.
Win32_DiskDrive: Represents a physical disk drive as seen by a computer running the Windows operating system.
Win32_DiskDriveToDiskPartition: Relates a disk drive and a partition existing on it.
Win32_DiskPartition: Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.
Win32_DiskQuota: Tracks disk space usage for NTFS file system volumes.
Win32_DisplayControllerConfiguration: Represents the video adapter configuration information of a computer system running Windows. This class is obsolete. In place of this class, use the properties in the Win32_VideoController, Win32_DesktopMonitor, and CIM_VideoControllerResolution classes.
Win32_DMAChannel: Represents a direct memory access (DMA) channel on a computer system running Windows.
Win32_DriverForDevice: Relates a printer to a printer driver.
Win32_Environment: Represents an environment or system environment setting on a computer system running Windows.
Win32_Fan: Represents the properties of a fan device in the computer system.
Win32_FloppyController: Represents the capabilities and management capacity of a floppy disk drive controller.
Win32_FloppyDrive: Manages the capabilities of a floppy disk drive.
Win32_Group: Represents data about a group account.
Win32_GroupInDomain: Identifies the group accounts associated with a Windows NT domain.
Win32_GroupUser: Relates a group and an account that is a member of that group.
Win32_HeatPipe: Represents the properties of a heat pipe cooling device.
Win32_IDEController: Represents the capabilities of an Integrated Drive Electronics (IDE) controller device.
Win32_IDEControllerDevice: Association class that relates an IDE controller and the logical device.
Win32_ImplementedCategory: Relates a component category and the COM class using its interfaces.
Win32_InfraredDevice: Represents the capabilities and management of an infrared device.
Win32_IP4PersistedRouteTable: Represents persisted IP routes.
Win32_IP4RouteTable: Represents information that governs the routing of network data packets.
Win32_IP4RouteTableEvent: Represents IP route change events.
Win32_IRQResource: Represents an interrupt request line (IRQ) number on a Windows computer system.
Win32_Keyboard: Represents a keyboard installed on a computer system running Windows.
Win32_LoadOrderGroup: Represents a group of system services that define execution dependencies.
Win32_LoadOrderGroupServiceDependencies: Represents an association between a base service and a load order group that the service depends on to start running.
Win32_LoadOrderGroupServiceMembers: Relates a load order group and a base service.
Win32_LocalTime: Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.
Win32_LogicalDisk: Represents a data source that resolves to an actual local storage device on a computer system running Windows.
Win32_LogicalDiskRootDirectory: Relates a logical disk and its directory structure.
Win32_LogicalDiskToPartition: Relates a logical disk drive and the disk partition it resides on.
Win32_LogicalFileAccess: Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).
Win32_LogicalFileAuditing: Relates the security settings of a file or directory one member of its system access control list (SACL).
Win32_LogicalFileGroup: Relates the security settings of a file or directory and its group.
Win32_LogicalFileOwner: Relates the security settings of a file or directory and its owner.
Win32_LogicalFileSecuritySetting: Represents security settings for a logical file.
Win32_LogicalProgramGroup: Represents a program group in a computer system running Windows.
Win32_LogicalProgramGroupDirectory: Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.
Win32_LogicalProgramGroupItem: Represents an element contained by a Win32_ProgramGroup instance, that is not itself anotherWin32_ProgramGroup instance.
Win32_LogicalProgramGroupItemDataFile: Relates the program group items of the Start menu, and the files in which they are stored.
Win32_LogicalShareAccess: Relates the security settings of a share and one member of its DACL.
Win32_LogicalShareAuditing: Relates the security settings of a share and one member of its SACL.
Win32_LogicalShareSecuritySetting: Represents security settings for a logical file.
Win32_LogonSession: Describes the logon session or sessions associated with a user logged on to Windows.
Win32_LogonSessionMappedDisk: Represents the mapped logical disks associated with the session.
Win32_LUID: Represents a locally unique identifier (LUID)
Win32_LUIDandAttributes: Represents a LUID and its attributes.
Win32_MappedLogicalDisk: Represents network storage devices that are mapped as logical disks on the computer system running Windows.
Win32_MemoryArray: Represents the properties of the computer system memory array and mapped addresses.
Win32_MemoryArrayLocation: Relates a logical memory array and the physical memory array upon which it exists.
Win32_MemoryDevice: Represents the properties of a computer system's memory device along with its associated mapped addresses.
Win32_MemoryDeviceArray: Relates a memory device and the memory array in which it resides.
Win32_MemoryDeviceLocation: Association class that relates a memory device and the physical memory on which it exists.
Win32_MethodParameterClass: Abstract, base class that implements method parameters derived from this class.
Win32_ModuleLoadTrace: Indicates that a process has loaded a new module.
Win32_ModuleTrace: Base event for module events.
Win32_MotherboardDevice: Represents a device that contains the central components of the computer system running Windows.
Win32_NamedJobObject: Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.
Win32_NamedJobObjectActgInfo: Represents the I/O accounting information for a job object.
Win32_NamedJobObjectLimit: Represents an association between a job object and the job object limit settings.
Win32_NamedJobObjectLimitSetting: Represents the limit settings for a job object.
Win32_NamedJobObjectProcess: Relates a job object and the process contained in the job object.
Win32_NamedJobObjectSecLimit: Relates a job object and the job object security limit settings.
Win32_NamedJobObjectSecLimitSetting: Represents the security limit settings for a job object.
Win32_NamedJobObjectStatistics: Represents an association between a job object and the job object I/O accounting information class.
Win32_NetworkAdapter: Represents a network adapter on a computer system running Windows.
Win32_NetworkAdapterConfiguration: Represents the attributes and behaviors of a network adapter. The class is not guaranteed to be supported after the ratification of the Distributed Management Task Force (DMTF) CIM network specification.
Win32_NetworkAdapterSetting: Relates a network adapter and its configuration settings.
Win32_NetworkClient: Represents a network client on a computer system running Windows.
Win32_NetworkConnection: Represents an active network connection in a Windows environment.
Win32_NetworkLoginProfile: Represents the network login information of a specific user on a computer system running Windows.
Win32_NetworkProtocol: Represents a protocol and its network characteristics on a computer system running Windows.
Win32_NTDomain: Represents a Windows NT domain.
Win32_NTEventlogFile: Represents data stored in a Windows Event log file.
Win32_NTLogEvent: Represents Windows events.
Win32_NTLogEventComputer: Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.
Win32_NTLogEventLog: Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.
Win32_NTLogEventUser: Relates instances of Win32_NTLogEvent and Win32_UserAccount.
Win32_OnBoardDevice: Represents common adapter devices built into the motherboard (system board).
Win32_OperatingSystem: Represents an operating system installed on a computer system running Windows.
Win32_OperatingSystemAutochkSetting: Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.
Win32_OperatingSystemQFE: Relates an operating system and product updates applied as represented inWin32_QuickFixEngineering.
Win32_OSRecoveryConfiguration: Represents the types of information that will be gathered from memory when the operating system fails.
Win32_PageFile: Represents the file used for handling virtual memory file swapping on a Windows system.
Win32_PageFileElementSetting: Relates the initial settings of a page file and the state of those settings during normal use.
Win32_PageFileSetting: Represents the settings of a page file.
Win32_PageFileUsage: Represents the file used for handling virtual memory file swapping on a computer system running Windows.
Win32_ParallelPort: Represents the properties of a parallel port on a computer system running Windows.
Win32_PCMCIAController: Manages the capabilities of a Personal Computer Memory Card Interface Adapter (PCMCIA) controller device.
Win32_Perf: The base class for the performance counter classes Win32_PerfRawData and Win32_PerfFormattedData.
Win32_PerfFormattedData: an abstract base class for the pre-installed, calculated data classes.
Win32_PerfRawData: The abstract base class for all concrete raw performance counter classes.
Win32_PhysicalMedia: Represents any type of documentation or storage medium.
Win32_PhysicalMemory: Represents a physical memory device located on a computer as available to the operating system.
Win32_PhysicalMemoryArray: Represents details about the computer system's physical memory.
Win32_PhysicalMemoryLocation: Relates an array of physical memory and its physical memory.
Win32_PingStatus: Represents the values returned by the standard ping command.
Win32_PNPAllocatedResource: Represents an association between logical devices and system resources.
Win32_PNPDevice: Relates a device (known to Configuration Manager as a PNPEntity), and the function it performs.
Win32_PNPEntity: Represents the properties of a Plug and Play device.
Win32_PointingDevice: Represents an input device used to point to and select regions on the display of a computer system running Windows.
Win32_PortableBattery: Represents the properties of a portable battery, such as one used for a notebook computer.
Win32_PortConnector: Represents physical connection ports, such as DB-25 pin male, Centronics, and PS/2.
Win32_PortResource: Represents an I/O port on a computer system running Windows.
Win32_POTSModem: Represents the services and characteristics of a Plain Old Telephone Service (POTS) modem on a computer system running Windows.
Win32_POTSModemToSerialPort: Relates a modem and the serial port the modem uses.
Win32_PowerManagementEvent: Represents power management events resulting from power state changes.
Win32_Printer: Represents a device connected to a computer system running Windows that is capable of reproducing a visual image on a medium.
Win32_PrinterConfiguration: Defines the configuration for a printer device.
Win32_PrinterController: Relates a printer and the local device to which the printer is connected.
Win32_PrinterDriver: Represents the drivers for a Win32_Printer instance.
Win32_PrinterDriverDll: Relates a local printer and its driver file (not the driver itself).
Win32_PrinterSetting: Relates a printer and its configuration settings.
Win32_PrinterShare: Relates a local printer and the share that represents it as it is viewed over a network.
Win32_PrintJob: Represents a print job generated by a Windows-based application.
Win32_PrivilegesStatus: Represents information about the privileges required to complete an operation.
Win32_Process: Represents a sequence of events on a computer system running Windows.
Win32_Processor: Represents a device capable of interpreting a sequence of machine instructions on a computer system running Windows.
Win32_ProcessStartTrace: Indicates that a new process has started.
Win32_ProcessStartup: Represents the startup configuration of a computer system running Windows.
Win32_ProcessStopTrace: Indicates that a process has terminated.
Win32_ProcessTrace: Base event for process events.
Win32_ProgramGroupContents: Relates a program group order and an individual program group or item contained in it.
Win32_ProgramGroupOrItem: Represents a logical grouping of programs on the user's Start|Programs menu.
Win32_ProtocolBinding: Relates a system-level driver, network protocol, and network adapter.
Win32_Proxy: Contains properties and methods to query and configure an Internet connection related to WPA.
Win32_QuickFixEngineering: Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.
Win32_QuotaSetting: Contains setting information for disk quotas on a volume.
Win32_Refrigeration: Represents the properties of a refrigeration device.
Win32_Registry: Represents the system registry on a computer system running Windows.
Win32_ScheduledJob: Represents a job scheduled using the Windows schedule service.
Win32_SCSIController: Represents a small computer system interface (SCSI) controller on a computer system running Windows.
Win32_SCSIControllerDevice: Relates a SCSI controller and the logical device (disk drive) connected to it.
Win32_SecurityDescriptor: Represents a structural representation of a SECURITY_DESCRIPTOR.
Win32_SecuritySetting: Represents security settings for a managed element.
Win32_SecuritySettingAccess: Represents the rights granted and denied to a trustee for a given object.
Win32_SecuritySettingAuditing: Represents the auditing for a given trustee on a given object.
Win32_SecuritySettingGroup: Relates the security of an object and its group.
Win32_SecuritySettingOfLogicalFile: Represents security settings of a file or directory object.
Win32_SecuritySettingOfLogicalShare: Represents security settings of a shared object.
Win32_SecuritySettingOfObject: Relates an object to its security settings.
Win32_SecuritySettingOwner: Relates the security settings of an object and its owner.
Win32_SerialPort: Represents a serial port on a computer system running Windows.
Win32_SerialPortConfiguration: Represents the settings for data transmission on a Windows serial port.
Win32_SerialPortSetting: Relates a serial port and its configuration settings.
Win32_ServerConnection: Represents the connections made from a remote computer to a shared resource on the local computer.
Win32_ServerSession: Represents the sessions that are established with the local computer by users on a remote computer.
Win32_Service: Represents a service on a computer system running Windows.
Win32_SessionConnection: Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.
Win32_SessionProcess: Represents an association between a logon session and the processes associated with that session.
Win32_ShadowBy: Represents the association between a shadow copy and the provider that creates the shadow copy.
Win32_ShadowContext: Specifies how a shadow copy is to be created, queried, or deleted.
Win32_ShadowCopy: Represents a duplicate copy of the original volume at a previous time.
Win32_ShadowDiffVolumeSupport: Represents an association between a shadow copy provider and a storage volume.
Win32_ShadowFor: Represents an association between a shadow copy and the volume for which the shadow copy is created.
Win32_ShadowOn: Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowProvider: Represents a component that creates and represents volume shadow copies.
Win32_ShadowStorage: Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowVolumeSupport: Represents an association between a shadow copy provider with a supported volume.
Win32_Share: Represents a shared resource on a computer system running Windows.
Win32_ShareToDirectory: Relates a shared resource on the computer system and the directory to which it is mapped.
Win32_ShortcutFile: Represents files that are shortcuts to other files, directories, and commands.
Win32_SID: Represents an arbitrary SID.
Win32_SIDandAttributes: Represents a security identifier (SID) and its attributes.
Win32_SMBIOSMemory: Represents the capabilities and management of memory-related logical devices.
Win32_SoundDevice: Represents the properties of a sound device on a computer system running Windows.
Win32_StartupCommand: Represents a command that runs automatically when a user logs onto the computer system.
Win32_SubDirectory: Relates a directory (folder) and one of its subdirectories (subfolders).
Win32_SystemAccount: Represents a system account.
Win32_SystemBIOS: Relates a computer system (including data such as startup properties, time zones, boot configurations, or administrative passwords) and a system BIOS (services, languages, and system management properties).
Win32_SystemBootConfiguration: Relates a computer system and its boot configuration.
Win32_SystemConfigurationChangeEvent: Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).
Win32_SystemDesktop: Relates a computer system and its desktop configuration.
Win32_SystemDevices: Relates a computer system and a logical device installed on that system.
Win32_SystemDriver: Represents the system driver for a base service.
Win32_SystemDriverPNPEntity: Relates a Plug and Play device on the Windows computer system and the driver that supports the Plug and Play device.
Win32_SystemEnclosure: Represents the properties associated with a physical system enclosure.
Win32_SystemLoadOrderGroups: Relates a computer system and a load order group.
Win32_SystemMemoryResource: Represents a system memory resource on a Windows system.
Win32_SystemNetworkConnections: Relates a network connection and the computer system on which it resides.
Win32_SystemOperatingSystem: Relates a computer system and its operating system.
Win32_SystemPartitions: Relates a computer system and a disk partition on that system.
Win32_SystemProcesses: Relates a computer system and a process running on that system.
Win32_SystemProgramGroups: Relates a computer system and a logical program group.
Win32_SystemResources: Relates a system resource and the computer system it resides on.
Win32_SystemServices: Relates a computer system and a service program that exists on the system.
Win32_SystemSetting: Relates a computer system and a general setting on that system.
Win32_SystemSlot: Represents physical connection points including ports, motherboard slots and peripherals, and proprietary connections points.
Win32_SystemSystemDriver: Relates a computer system and a system driver running on that computer system.
Win32_SystemTimeZone: Relates a computer system and a time zone.
Win32_SystemTrace: Base class for all system trace events, including module, process, and thread traces.
Win32_SystemUsers: Relates a computer system and a user account on that system.
Win32_TapeDrive: Represents a tape drive on a computer system running Windows.
Win32_TCPIPPrinterPort: Represents a TCP/IP service access point.
Win32_TemperatureProbe: Represents the properties of a temperature sensor (electronic thermometer).
Win32_Thread: Represents a thread of execution.
Win32_ThreadStartTrace: Indicates a new thread has started.
Win32_ThreadStopTrace: Indicates that a thread has stopped.
Win32_ThreadTrace: Base event class for thread events.
Win32_TimeZone: Represents the time zone information for a computer system running Windows.
Win32_TokenGroups: Represents information about the group SIDs in an access token.
Win32_TokenPrivileges: Represents information about a set of privileges for an access token.
Win32_Trustee: Represents a trustee.
Win32_USBController: Manages the capabilities of a universal serial bus (USB) controller.
Win32_USBControllerDevice: Relates a USB controller and the CIM_LogicalDevice instances connected to it.
Win32_USBHub: Represents the management characteristics of a USB hub.
Win32_UserAccount: Represents information about a user account on a computer system running Windows.
Win32_UserDesktop: Relates a user account and the desktop settings that are specific to it.
Win32_UserInDomain: Relates a user account and a Windows NT domain.
Win32_UTCTime: Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24–hour clock.
Win32_VideoController: Represents the capabilities and management capacity of the video controller on a computer system running Windows.
Win32_VideoSettings: Relates a video controller and video settings that can be applied to it.
Win32_VoltageProbe: Represents the properties of a voltage sensor (electronic voltmeter).
Win32_Volume: Represents an area of storage on a hard disk.
Win32_Volume: Represents an area of storage on a hard disk.
Win32_VolumeChangeEvent: Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.
Win32_VolumeQuota: Relates a volume to the per volume quota settings.
Win32_VolumeQuotaSetting: Relates disk quota settings with a specific disk volume.
Win32_VolumeUserQuota: Relates per user quotas to quota-enabled volumes.
Win32_VolumeUserQuota: Represents a volume to the per volume quota settings.
Win32_WindowsProductActivation: Contains properties and methods related to WPA.
Win32_WMIElementSetting: Association between a service running in the Windows system, and the WMI settings it can use.
Win32_WMISetting: Contains the operational parameters for the WMI service.

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

281

Class: Description

Win32_1394Controller: Represents the capabilities and management of a 1394 controller.

Win32_1394ControllerDevice: Relates the high-speed serial bus (IEEE 1394 Firewire) Controller and the CIM_LogicalDevice instance connected to it.

Win32_Account: Represents information about user accounts and group accounts known to the computer system running Windows.

Win32_AccountSID: Relates a security account instance with a security descriptor instance.

Win32_ACE: Represents an access control entry (ACE).

Win32_ActiveRoute: Relates the current IP4 route to the persisted IP route table.

Win32_AllocatedResource: Relates a logical device to a system resource.

Win32_AssociatedProcessorMemory: Relates a processor and its cache memory.

Win32_AutochkSetting: Represents the settings for the autocheck operation of a disk.

Win32_BaseBoard: Represents a baseboard (also known as a motherboard or system board).

Win32_BaseService: Represents executable objects that are installed in a registry database maintained by the Service Control Manager.

Win32_Battery: Represents a battery connected to the computer system.

Win32_BIOS: Represents the attributes of the computer system's basic input or output services (BIOS) that are installed on the computer.

Win32_BootConfiguration: Represents the boot configuration of a computer system running Windows.

Win32_Bus: Represents a physical bus as seen by a Windows operating system.

Win32_CacheMemory: Represents cache memory (internal and external) on a computer system.

Win32_CDROMDrive: Represents a CD-ROM drive on a computer system running Windows.

Win32_CIMLogicalDeviceCIMDataFile: Relates logical devices and data files, indicating the driver files used by the device.

Win32_ClassicCOMApplicationClasses: Relates a DCOM application and a COM component grouped under it.

Win32_ClassicCOMClass: Represents the properties of a COM component.

Win32_ClassicCOMClassSettings: Relates a COM class and the settings used to configure instances of the COM class.

Win32_ClientApplicationSetting: Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.

Win32_CollectionStatistics: Relates a managed system element collection and the class representing statistical information about the collection.

Win32_COMApplication: Represents a COM application.

Win32_COMApplicationClasses: Relates a COM component and the COM application where it resides.

Win32_COMApplicationSettings: Relates a DCOM application and its configuration settings.

Win32_COMClass: Represents the properties of a COM component.

Win32_ComClassAutoEmulator: Relates a COM class and another COM class that it automatically emulates.

Win32_ComClassEmulator: Relates two versions of a COM class.

Win32_ComponentCategory: Represents a component category.

Win32_ComputerShutdownEvent: Represents computer shutdown events.

Win32_ComputerSystem: Represents a computer system operating in a Windows environment.

Win32_ComputerSystemEvent: Represents events related to a computer system.

Win32_ComputerSystemProcessor: Relates a computer system and a processor running on that system.

Win32_ComputerSystemProduct: Represents a product.

Win32_ComputerSystemWindowsProductActivationSetting: Relates instances of Win32_ComputerSystem andWin32_WindowsProductActivation.

Win32_COMSetting: Represents the settings associated with a COM component or COM application.

Win32_ConnectionShare: Relates a shared resource on the computer and the connection made to the shared resource.

Win32_ControllerHasHub: Represents the hubs downstream from the universal serial bus (USB) controller.

Win32_CurrentProbe: Represents the properties of a current monitoring sensor (ammeter).

Win32_CurrentTime: Represents an instance in time as component seconds, minutes, day of the week, and so on.

Win32_DCOMApplication: Represents the properties of a DCOM application.

Win32_DCOMApplicationAccessAllowedSetting: Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.

Win32_DCOMApplicationLaunchAllowedSetting: Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.

Win32_DCOMApplicationSetting: Represents the settings of a DCOM application.

Win32_DependentService: Relates two interdependent base services.

Win32_Desktop: Represents the common characteristics of a user's desktop.

Win32_DesktopMonitor: Represents the type of monitor or display device attached to the computer system.

Win32_DeviceBus: Relates a system bus and a logical device using the bus.

Win32_DeviceChangeEvent: Represents device change events resulting from the addition, removal, or modification of devices on the computer system.

Win32_DeviceMemoryAddress: Represents a device memory address on a Windows system.

Win32_DeviceSettings: Relates a logical device and a setting that can be applied to it.

Win32_DFSNode: Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).

Win32_DFSNodeTarget: Represents the relationship of a DFS node to one of its targets.

Win32_DFSTarget: Represents the target of a DFS node.

Win32_Directory: Represents a directory entry on a computer system running Windows.

Win32_DirectorySpecification: Represents the directory layout for the product.

Win32_DiskDrive: Represents a physical disk drive as seen by a computer running the Windows operating system.

Win32_DiskDriveToDiskPartition: Relates a disk drive and a partition existing on it.

Win32_DiskPartition: Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.

Win32_DiskQuota: Tracks disk space usage for NTFS file system volumes.

Win32_DisplayControllerConfiguration: Represents the video adapter configuration information of a computer system running Windows. This class is obsolete. In place of this class, use the properties in the Win32_VideoController, Win32_DesktopMonitor, and CIM_VideoControllerResolution classes.

Win32_DMAChannel: Represents a direct memory access (DMA) channel on a computer system running Windows.

Win32_DriverForDevice: Relates a printer to a printer driver.

Win32_Environment: Represents an environment or system environment setting on a computer system running Windows.

Win32_Fan: Represents the properties of a fan device in the computer system.

Win32_FloppyController: Represents the capabilities and management capacity of a floppy disk drive controller.

Win32_FloppyDrive: Manages the capabilities of a floppy disk drive.

Win32_Group: Represents data about a group account.

Win32_GroupInDomain: Identifies the group accounts associated with a Windows NT domain.

Win32_GroupUser: Relates a group and an account that is a member of that group.

Win32_HeatPipe: Represents the properties of a heat pipe cooling device.

Win32_IDEController: Represents the capabilities of an Integrated Drive Electronics (IDE) controller device.

Win32_IDEControllerDevice: Association class that relates an IDE controller and the logical device.

Win32_ImplementedCategory: Relates a component category and the COM class using its interfaces.

Win32_InfraredDevice: Represents the capabilities and management of an infrared device.

Win32_IP4PersistedRouteTable: Represents persisted IP routes.

Win32_IP4RouteTable: Represents information that governs the routing of network data packets.

Win32_IP4RouteTableEvent: Represents IP route change events.

Win32_IRQResource: Represents an interrupt request line (IRQ) number on a Windows computer system.

Win32_Keyboard: Represents a keyboard installed on a computer system running Windows.

Win32_LoadOrderGroup: Represents a group of system services that define execution dependencies.

Win32_LoadOrderGroupServiceDependencies: Represents an association between a base service and a load order group that the service depends on to start running.

Win32_LoadOrderGroupServiceMembers: Relates a load order group and a base service.

Win32_LocalTime: Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.

Win32_LogicalDisk: Represents a data source that resolves to an actual local storage device on a computer system running Windows.

Win32_LogicalDiskRootDirectory: Relates a logical disk and its directory structure.

Win32_LogicalDiskToPartition: Relates a logical disk drive and the disk partition it resides on.

Win32_LogicalFileAccess: Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).

Win32_LogicalFileAuditing: Relates the security settings of a file or directory one member of its system access control list (SACL).

Win32_LogicalFileGroup: Relates the security settings of a file or directory and its group.

Win32_LogicalFileOwner: Relates the security settings of a file or directory and its owner.

Win32_LogicalFileSecuritySetting: Represents security settings for a logical file.

Win32_LogicalProgramGroup: Represents a program group in a computer system running Windows.

Win32_LogicalProgramGroupDirectory: Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.

Win32_LogicalProgramGroupItem: Represents an element contained by a Win32_ProgramGroup instance, that is not itself anotherWin32_ProgramGroup instance.

Win32_LogicalProgramGroupItemDataFile: Relates the program group items of the Start menu, and the files in which they are stored.

Win32_LogicalShareAccess: Relates the security settings of a share and one member of its DACL.

Win32_LogicalShareAuditing: Relates the security settings of a share and one member of its SACL.

Win32_LogicalShareSecuritySetting: Represents security settings for a logical file.

Win32_LogonSession: Describes the logon session or sessions associated with a user logged on to Windows.

Win32_LogonSessionMappedDisk: Represents the mapped logical disks associated with the session.

Win32_LUID: Represents a locally unique identifier (LUID)

Win32_LUIDandAttributes: Represents a LUID and its attributes.

Win32_MappedLogicalDisk: Represents network storage devices that are mapped as logical disks on the computer system running Windows.

Win32_MemoryArray: Represents the properties of the computer system memory array and mapped addresses.

Win32_MemoryArrayLocation: Relates a logical memory array and the physical memory array upon which it exists.

Win32_MemoryDevice: Represents the properties of a computer system's memory device along with its associated mapped addresses.

Win32_MemoryDeviceArray: Relates a memory device and the memory array in which it resides.

Win32_MemoryDeviceLocation: Association class that relates a memory device and the physical memory on which it exists.

Win32_MethodParameterClass: Abstract, base class that implements method parameters derived from this class.

Win32_ModuleLoadTrace: Indicates that a process has loaded a new module.

Win32_ModuleTrace: Base event for module events.

Win32_MotherboardDevice: Represents a device that contains the central components of the computer system running Windows.

Win32_NamedJobObject: Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.

Win32_NamedJobObjectActgInfo: Represents the I/O accounting information for a job object.

Win32_NamedJobObjectLimit: Represents an association between a job object and the job object limit settings.

Win32_NamedJobObjectLimitSetting: Represents the limit settings for a job object.

Win32_NamedJobObjectProcess: Relates a job object and the process contained in the job object.

Win32_NamedJobObjectSecLimit: Relates a job object and the job object security limit settings.

Win32_NamedJobObjectSecLimitSetting: Represents the security limit settings for a job object.

Win32_NamedJobObjectStatistics: Represents an association between a job object and the job object I/O accounting information class.

Win32_NetworkAdapter: Represents a network adapter on a computer system running Windows.

Win32_NetworkAdapterConfiguration: Represents the attributes and behaviors of a network adapter. The class is not guaranteed to be supported after the ratification of the Distributed Management Task Force (DMTF) CIM network specification.

Win32_NetworkAdapterSetting: Relates a network adapter and its configuration settings.

Win32_NetworkClient: Represents a network client on a computer system running Windows.

Win32_NetworkConnection: Represents an active network connection in a Windows environment.

Win32_NetworkLoginProfile: Represents the network login information of a specific user on a computer system running Windows.

Win32_NetworkProtocol: Represents a protocol and its network characteristics on a computer system running Windows.

Win32_NTDomain: Represents a Windows NT domain.

Win32_NTEventlogFile: Represents data stored in a Windows Event log file.

Win32_NTLogEvent: Represents Windows events.

Win32_NTLogEventComputer: Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.

Win32_NTLogEventLog: Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.

Win32_NTLogEventUser: Relates instances of Win32_NTLogEvent and Win32_UserAccount.

Win32_OnBoardDevice: Represents common adapter devices built into the motherboard (system board).

Win32_OperatingSystem: Represents an operating system installed on a computer system running Windows.

Win32_OperatingSystemAutochkSetting: Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.

Win32_OperatingSystemQFE: Relates an operating system and product updates applied as represented inWin32_QuickFixEngineering.

Win32_OSRecoveryConfiguration: Represents the types of information that will be gathered from memory when the operating system fails.

Win32_PageFile: Represents the file used for handling virtual memory file swapping on a Windows system.

Win32_PageFileElementSetting: Relates the initial settings of a page file and the state of those settings during normal use.

Win32_PageFileSetting: Represents the settings of a page file.

Win32_PageFileUsage: Represents the file used for handling virtual memory file swapping on a computer system running Windows.

Win32_ParallelPort: Represents the properties of a parallel port on a computer system running Windows.

Win32_PCMCIAController: Manages the capabilities of a Personal Computer Memory Card Interface Adapter (PCMCIA) controller device.

Win32_Perf: The base class for the performance counter classes Win32_PerfRawData and Win32_PerfFormattedData.

Win32_PerfFormattedData: an abstract base class for the pre-installed, calculated data classes.

Win32_PerfRawData: The abstract base class for all concrete raw performance counter classes.

Win32_PhysicalMedia: Represents any type of documentation or storage medium.

Win32_PhysicalMemory: Represents a physical memory device located on a computer as available to the operating system.

Win32_PhysicalMemoryArray: Represents details about the computer system's physical memory.

Win32_PhysicalMemoryLocation: Relates an array of physical memory and its physical memory.

Win32_PingStatus: Represents the values returned by the standard ping command.

Win32_PNPAllocatedResource: Represents an association between logical devices and system resources.

Win32_PNPDevice: Relates a device (known to Configuration Manager as a PNPEntity), and the function it performs.

Win32_PNPEntity: Represents the properties of a Plug and Play device.

Win32_PointingDevice: Represents an input device used to point to and select regions on the display of a computer system running Windows.

Win32_PortableBattery: Represents the properties of a portable battery, such as one used for a notebook computer.

Win32_PortConnector: Represents physical connection ports, such as DB-25 pin male, Centronics, and PS/2.

Win32_PortResource: Represents an I/O port on a computer system running Windows.

Win32_POTSModem: Represents the services and characteristics of a Plain Old Telephone Service (POTS) modem on a computer system running Windows.

Win32_POTSModemToSerialPort: Relates a modem and the serial port the modem uses.

Win32_PowerManagementEvent: Represents power management events resulting from power state changes.

Win32_Printer: Represents a device connected to a computer system running Windows that is capable of reproducing a visual image on a medium.

Win32_PrinterConfiguration: Defines the configuration for a printer device.

Win32_PrinterController: Relates a printer and the local device to which the printer is connected.

Win32_PrinterDriver: Represents the drivers for a Win32_Printer instance.

Win32_PrinterDriverDll: Relates a local printer and its driver file (not the driver itself).

Win32_PrinterSetting: Relates a printer and its configuration settings.

Win32_PrinterShare: Relates a local printer and the share that represents it as it is viewed over a network.

Win32_PrintJob: Represents a print job generated by a Windows-based application.

Win32_PrivilegesStatus: Represents information about the privileges required to complete an operation.

Win32_Process: Represents a sequence of events on a computer system running Windows.

Win32_Processor: Represents a device capable of interpreting a sequence of machine instructions on a computer system running Windows.

Win32_ProcessStartTrace: Indicates that a new process has started.

Win32_ProcessStartup: Represents the startup configuration of a computer system running Windows.

Win32_ProcessStopTrace: Indicates that a process has terminated.

Win32_ProcessTrace: Base event for process events.

Win32_ProgramGroupContents: Relates a program group order and an individual program group or item contained in it.

Win32_ProgramGroupOrItem: Represents a logical grouping of programs on the user's Start|Programs menu.

Win32_ProtocolBinding: Relates a system-level driver, network protocol, and network adapter.

Win32_Proxy: Contains properties and methods to query and configure an Internet connection related to WPA.

Win32_QuickFixEngineering: Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.

Win32_QuotaSetting: Contains setting information for disk quotas on a volume.

Win32_Refrigeration: Represents the properties of a refrigeration device.

Win32_Registry: Represents the system registry on a computer system running Windows.

Win32_ScheduledJob: Represents a job scheduled using the Windows schedule service.

Win32_SCSIController: Represents a small computer system interface (SCSI) controller on a computer system running Windows.

Win32_SCSIControllerDevice: Relates a SCSI controller and the logical device (disk drive) connected to it.

Win32_SecurityDescriptor: Represents a structural representation of a SECURITY_DESCRIPTOR.

Win32_SecuritySetting: Represents security settings for a managed element.

Win32_SecuritySettingAccess: Represents the rights granted and denied to a trustee for a given object.

Win32_SecuritySettingAuditing: Represents the auditing for a given trustee on a given object.

Win32_SecuritySettingGroup: Relates the security of an object and its group.

Win32_SecuritySettingOfLogicalFile: Represents security settings of a file or directory object.

Win32_SecuritySettingOfLogicalShare: Represents security settings of a shared object.

Win32_SecuritySettingOfObject: Relates an object to its security settings.

Win32_SecuritySettingOwner: Relates the security settings of an object and its owner.

Win32_SerialPort: Represents a serial port on a computer system running Windows.

Win32_SerialPortConfiguration: Represents the settings for data transmission on a Windows serial port.

Win32_SerialPortSetting: Relates a serial port and its configuration settings.

Win32_ServerConnection: Represents the connections made from a remote computer to a shared resource on the local computer.

Win32_ServerSession: Represents the sessions that are established with the local computer by users on a remote computer.

Win32_Service: Represents a service on a computer system running Windows.

Win32_SessionConnection: Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.

Win32_SessionProcess: Represents an association between a logon session and the processes associated with that session.

Win32_ShadowBy: Represents the association between a shadow copy and the provider that creates the shadow copy.

Win32_ShadowContext: Specifies how a shadow copy is to be created, queried, or deleted.

Win32_ShadowCopy: Represents a duplicate copy of the original volume at a previous time.

Win32_ShadowDiffVolumeSupport: Represents an association between a shadow copy provider and a storage volume.

Win32_ShadowFor: Represents an association between a shadow copy and the volume for which the shadow copy is created.

Win32_ShadowOn: Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowProvider: Represents a component that creates and represents volume shadow copies.

Win32_ShadowStorage: Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowVolumeSupport: Represents an association between a shadow copy provider with a supported volume.

Win32_Share: Represents a shared resource on a computer system running Windows.

Win32_ShareToDirectory: Relates a shared resource on the computer system and the directory to which it is mapped.

Win32_ShortcutFile: Represents files that are shortcuts to other files, directories, and commands.

Win32_SID: Represents an arbitrary SID.

Win32_SIDandAttributes: Represents a security identifier (SID) and its attributes.

Win32_SMBIOSMemory: Represents the capabilities and management of memory-related logical devices.

Win32_SoundDevice: Represents the properties of a sound device on a computer system running Windows.

Win32_StartupCommand: Represents a command that runs automatically when a user logs onto the computer system.

Win32_SubDirectory: Relates a directory (folder) and one of its subdirectories (subfolders).

Win32_SystemAccount: Represents a system account.

Win32_SystemBIOS: Relates a computer system (including data such as startup properties, time zones, boot configurations, or administrative passwords) and a system BIOS (services, languages, and system management properties).

Win32_SystemBootConfiguration: Relates a computer system and its boot configuration.

Win32_SystemConfigurationChangeEvent: Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).

Win32_SystemDesktop: Relates a computer system and its desktop configuration.

Win32_SystemDevices: Relates a computer system and a logical device installed on that system.

Win32_SystemDriver: Represents the system driver for a base service.

Win32_SystemDriverPNPEntity: Relates a Plug and Play device on the Windows computer system and the driver that supports the Plug and Play device.

Win32_SystemEnclosure: Represents the properties associated with a physical system enclosure.

Win32_SystemLoadOrderGroups: Relates a computer system and a load order group.

Win32_SystemMemoryResource: Represents a system memory resource on a Windows system.

Win32_SystemNetworkConnections: Relates a network connection and the computer system on which it resides.

Win32_SystemOperatingSystem: Relates a computer system and its operating system.

Win32_SystemPartitions: Relates a computer system and a disk partition on that system.

Win32_SystemProcesses: Relates a computer system and a process running on that system.

Win32_SystemProgramGroups: Relates a computer system and a logical program group.

Win32_SystemResources: Relates a system resource and the computer system it resides on.

Win32_SystemServices: Relates a computer system and a service program that exists on the system.

Win32_SystemSetting: Relates a computer system and a general setting on that system.

Win32_SystemSlot: Represents physical connection points including ports, motherboard slots and peripherals, and proprietary connections points.

Win32_SystemSystemDriver: Relates a computer system and a system driver running on that computer system.

Win32_SystemTimeZone: Relates a computer system and a time zone.

Win32_SystemTrace: Base class for all system trace events, including module, process, and thread traces.

Win32_SystemUsers: Relates a computer system and a user account on that system.

Win32_TapeDrive: Represents a tape drive on a computer system running Windows.

Win32_TCPIPPrinterPort: Represents a TCP/IP service access point.

Win32_TemperatureProbe: Represents the properties of a temperature sensor (electronic thermometer).

Win32_Thread: Represents a thread of execution.

Win32_ThreadStartTrace: Indicates a new thread has started.

Win32_ThreadStopTrace: Indicates that a thread has stopped.

Win32_ThreadTrace: Base event class for thread events.

Win32_TimeZone: Represents the time zone information for a computer system running Windows.

Win32_TokenGroups: Represents information about the group SIDs in an access token.

Win32_TokenPrivileges: Represents information about a set of privileges for an access token.

Win32_Trustee: Represents a trustee.

Win32_USBController: Manages the capabilities of a universal serial bus (USB) controller.

Win32_USBControllerDevice: Relates a USB controller and the CIM_LogicalDevice instances connected to it.

Win32_USBHub: Represents the management characteristics of a USB hub.

Win32_UserAccount: Represents information about a user account on a computer system running Windows.

Win32_UserDesktop: Relates a user account and the desktop settings that are specific to it.

Win32_UserInDomain: Relates a user account and a Windows NT domain.

Win32_UTCTime: Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24–hour clock.

Win32_VideoController: Represents the capabilities and management capacity of the video controller on a computer system running Windows.

Win32_VideoSettings: Relates a video controller and video settings that can be applied to it.

Win32_VoltageProbe: Represents the properties of a voltage sensor (electronic voltmeter).

Win32_Volume: Represents an area of storage on a hard disk.

Win32_VolumeChangeEvent: Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.

Win32_VolumeQuota: Relates a volume to the per volume quota settings.

Win32_VolumeQuotaSetting: Relates disk quota settings with a specific disk volume.

Win32_VolumeUserQuota: Relates per user quotas to quota-enabled volumes.

Win32_VolumeUserQuota: Represents a volume to the per volume quota settings.

Win32_WindowsProductActivation: Contains properties and methods related to WPA.

Win32_WMIElementSetting: Association between a service running in the Windows system, and the WMI settings it can use.

Win32_WMISetting: Contains the operational parameters for the WMI service.

Win32 Classes (Windows)

(No Ratings Yet)

Win32_1394Controller
Win32_1394ControllerDevice
Win32_Account
Win32_AccountSID
Win32_ACE
Win32_ActiveRoute
Win32_AllocatedResource
Win32_AssociatedProcessorMemory
Win32_AutochkSetting
Win32_BaseBoard
Win32_BaseService
Win32_Battery
Win32_BIOS
Win32_BootConfiguration
Win32_Bus
Win32_CacheMemory
Win32_CDROMDrive
Win32_CIMLogicalDeviceCIMDataFile
Win32_ClassicCOMApplicationClasses
Win32_ClassicCOMClass
Win32_ClassicCOMClassSettings
Win32_ClientApplicationSetting
Win32_CollectionStatistics
Win32_COMApplication
Win32_COMApplicationClasses
Win32_COMApplicationSettings
Win32_COMClass
Win32_ComClassAutoEmulator
Win32_ComClassEmulator
Win32_ComponentCategory
Win32_ComputerShutdownEvent
Win32_ComputerSystem
Win32_ComputerSystemEvent
Win32_ComputerSystemProcessor
Win32_ComputerSystemProduct
Win32_ComputerSystemWindowsProductActivationSetting
Win32_COMSetting
Win32_ConnectionShare
Win32_ControllerHasHub
Win32_CurrentProbe
Win32_CurrentTime
Win32_DCOMApplication
Win32_DCOMApplicationAccessAllowedSetting
Win32_DCOMApplicationLaunchAllowedSetting
Win32_DCOMApplicationSetting
Win32_DependentService
Win32_Desktop
Win32_DesktopMonitor
Win32_DeviceBus
Win32_DeviceChangeEvent
Win32_DeviceMemoryAddress
Win32_DeviceSettings
Win32_DFSNode
Win32_DFSNodeTarget
Win32_DFSTarget
Win32_Directory
Win32_DirectorySpecification
Win32_DiskDrive
Win32_DiskDriveToDiskPartition
Win32_DiskPartition
Win32_DiskQuota
Win32_DisplayControllerConfiguration
Win32_DMAChannel
Win32_DriverForDevice
Win32_Environment
Win32_Fan
Win32_FloppyController
Win32_FloppyDrive
Win32_Group
Win32_GroupInDomain
Win32_GroupUser
Win32_HeatPipe
Win32_IDEController
Win32_IDEControllerDevice
Win32_ImplementedCategory
Win32_InfraredDevice
Win32_IP4PersistedRouteTable
Win32_IP4RouteTable
Win32_IP4RouteTableEvent
Win32_IRQResource
Win32_Keyboard
Win32_LoadOrderGroup
Win32_LoadOrderGroupServiceDependencies
Win32_LoadOrderGroupServiceMembers
Win32_LocalTime
Win32_LogicalDisk
Win32_LogicalDiskRootDirectory
Win32_LogicalDiskToPartition
Win32_LogicalFileAccess
Win32_LogicalFileAuditing
Win32_LogicalFileGroup
Win32_LogicalFileOwner
Win32_LogicalFileSecuritySetting
Win32_LogicalProgramGroup
Win32_LogicalProgramGroupDirectory
Win32_LogicalProgramGroupItem
Win32_LogicalProgramGroupItemDataFile
Win32_LogicalShareAccess
Win32_LogicalShareAuditing
Win32_LogicalShareSecuritySetting
Win32_LogonSession
Win32_LogonSessionMappedDisk
Win32_LUID
Win32_LUIDandAttributes
Win32_MappedLogicalDisk
Win32_MemoryArray
Win32_MemoryArrayLocation
Win32_MemoryDevice
Win32_MemoryDeviceArray
Win32_MemoryDeviceLocation
Win32_MethodParameterClass
Win32_ModuleLoadTrace
Win32_ModuleTrace
Win32_MotherboardDevice
Win32_NamedJobObject
Win32_NamedJobObjectActgInfo
Win32_NamedJobObjectLimit
Win32_NamedJobObjectLimitSetting
Win32_NamedJobObjectProcess
Win32_NamedJobObjectSecLimit
Win32_NamedJobObjectSecLimitSetting
Win32_NamedJobObjectStatistics
Win32_NetworkAdapter
Win32_NetworkAdapterConfiguration
Win32_NetworkAdapterSetting
Win32_NetworkClient
Win32_NetworkConnection
Win32_NetworkLoginProfile
Win32_NetworkProtocol
Win32_NTDomain
Win32_NTEventlogFile
Win32_NTLogEvent
Win32_NTLogEventComputer
Win32_NTLogEventLog
Win32_NTLogEventUser
Win32_OnBoardDevice
Win32_OperatingSystem
Win32_OperatingSystemAutochkSetting
Win32_OperatingSystemQFE
Win32_OSRecoveryConfiguration
Win32_PageFile
Win32_PageFileElementSetting
Win32_PageFileSetting
Win32_PageFileUsage
Win32_ParallelPort
Win32_PCMCIAController
Win32_Perf
Win32_PerfFormattedData
Win32_PerfRawData
Win32_PhysicalMedia
Win32_PhysicalMemory
Win32_PhysicalMemoryArray
Win32_PhysicalMemoryLocation
Win32_PingStatus
Win32_PNPAllocatedResource
Win32_PNPDevice
Win32_PNPEntity
Win32_PointingDevice
Win32_PortableBattery
Win32_PortConnector
Win32_PortResource
Win32_POTSModem
Win32_POTSModemToSerialPort
Win32_PowerManagementEvent
Win32_Printer
Win32_PrinterConfiguration
Win32_PrinterController
Win32_PrinterDriver
Win32_PrinterDriverDll
Win32_PrinterSetting
Win32_PrinterShare
Win32_PrintJob
Win32_PrivilegesStatus
Win32_Process
Win32_Processor
Win32_ProcessStartTrace
Win32_ProcessStartup
Win32_ProcessStopTrace
Win32_ProcessTrace
Win32_ProgramGroupContents
Win32_ProgramGroupOrItem
Win32_ProtocolBinding
Win32_Proxy
Win32_QuickFixEngineering
Win32_QuotaSetting
Win32_Refrigeration
Win32_Registry
Win32_ScheduledJob
Win32_SCSIController
Win32_SCSIControllerDevice
Win32_SecurityDescriptor
Win32_SecuritySetting
Win32_SecuritySettingAccess
Win32_SecuritySettingAuditing
Win32_SecuritySettingGroup
Win32_SecuritySettingOfLogicalFile
Win32_SecuritySettingOfLogicalShare
Win32_SecuritySettingOfObject
Win32_SecuritySettingOwner
Win32_SerialPort
Win32_SerialPortConfiguration
Win32_SerialPortSetting
Win32_ServerConnection
Win32_ServerSession
Win32_Service
Win32_SessionConnection
Win32_SessionProcess
Win32_ShadowBy
Win32_ShadowContext
Win32_ShadowCopy
Win32_ShadowDiffVolumeSupport
Win32_ShadowFor
Win32_ShadowOn
Win32_ShadowProvider
Win32_ShadowStorage
Win32_ShadowVolumeSupport
Win32_Share
Win32_ShareToDirectory
Win32_ShortcutFile
Win32_SID
Win32_SIDandAttributes
Win32_SMBIOSMemory
Win32_SoundDevice
Win32_StartupCommand
Win32_SubDirectory
Win32_SystemAccount
Win32_SystemBIOS
Win32_SystemBootConfiguration
Win32_SystemConfigurationChangeEvent
Win32_SystemDesktop
Win32_SystemDevices
Win32_SystemDriver
Win32_SystemDriverPNPEntity
Win32_SystemEnclosure
Win32_SystemLoadOrderGroups
Win32_SystemMemoryResource
Win32_SystemNetworkConnections
Win32_SystemOperatingSystem
Win32_SystemPartitions
Win32_SystemProcesses
Win32_SystemProgramGroups
Win32_SystemResources
Win32_SystemServices
Win32_SystemSetting
Win32_SystemSlot
Win32_SystemSystemDriver
Win32_SystemTimeZone
Win32_SystemTrace
Win32_SystemUsers
Win32_TapeDrive
Win32_TCPIPPrinterPort
Win32_TemperatureProbe
Win32_Thread
Win32_ThreadStartTrace
Win32_ThreadStopTrace
Win32_ThreadTrace
Win32_TimeZone
Win32_TokenGroups
Win32_TokenPrivileges
Win32_Trustee
Win32_USBController
Win32_USBControllerDevice
Win32_USBHub
Win32_UserAccount
Win32_UserDesktop
Win32_UserInDomain
Win32_UTCTime
Win32_VideoController
Win32_VideoSettings
Win32_VoltageProbe
Win32_Volume
Win32_Volume
Win32_VolumeChangeEvent
Win32_VolumeQuota
Win32_VolumeQuotaSetting
Win32_VolumeUserQuota
Win32_VolumeUserQuota
Win32_WindowsProductActivation
Win32_WMIElementSetting
Win32_WMISetting

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

Win32_1394Controller

Win32_1394ControllerDevice

Win32_Account

Win32_AccountSID

Win32_ACE

Win32_ActiveRoute

Win32_AllocatedResource

Win32_AssociatedProcessorMemory

Win32_AutochkSetting

Win32_BaseBoard

Win32_BaseService

Win32_Battery

Win32_BIOS

Win32_BootConfiguration

Win32_Bus

Win32_CacheMemory

Win32_CDROMDrive

Win32_CIMLogicalDeviceCIMDataFile

Win32_ClassicCOMApplicationClasses

Win32_ClassicCOMClass

Win32_ClassicCOMClassSettings

Win32_ClientApplicationSetting

Win32_CollectionStatistics

Win32_COMApplication

Win32_COMApplicationClasses

Win32_COMApplicationSettings

Win32_COMClass

Win32_ComClassAutoEmulator

Win32_ComClassEmulator

Win32_ComponentCategory

Win32_ComputerShutdownEvent

Win32_ComputerSystem

Win32_ComputerSystemEvent

Win32_ComputerSystemProcessor

Win32_ComputerSystemProduct

Win32_ComputerSystemWindowsProductActivationSetting

Win32_COMSetting

Win32_ConnectionShare

Win32_ControllerHasHub

Win32_CurrentProbe

Win32_CurrentTime

Win32_DCOMApplication

Win32_DCOMApplicationAccessAllowedSetting

Win32_DCOMApplicationLaunchAllowedSetting

Win32_DCOMApplicationSetting

Win32_DependentService

Win32_Desktop

Win32_DesktopMonitor

Win32_DeviceBus

Win32_DeviceChangeEvent

Win32_DeviceMemoryAddress

Win32_DeviceSettings

Win32_DFSNode

Win32_DFSNodeTarget

Win32_DFSTarget

Win32_Directory

Win32_DirectorySpecification

Win32_DiskDrive

Win32_DiskDriveToDiskPartition

Win32_DiskPartition

Win32_DiskQuota

Win32_DisplayControllerConfiguration

Win32_DMAChannel

Win32_DriverForDevice

Win32_Environment

Win32_Fan

Win32_FloppyController

Win32_FloppyDrive

Win32_Group

Win32_GroupInDomain

Win32_GroupUser

Win32_HeatPipe

Win32_IDEController

Win32_IDEControllerDevice

Win32_ImplementedCategory

Win32_InfraredDevice

Win32_IP4PersistedRouteTable

Win32_IP4RouteTable

Win32_IP4RouteTableEvent

Win32_IRQResource

Win32_Keyboard

Win32_LoadOrderGroup

Win32_LoadOrderGroupServiceDependencies

Win32_LoadOrderGroupServiceMembers

Win32_LocalTime

Win32_LogicalDisk

Win32_LogicalDiskRootDirectory

Win32_LogicalDiskToPartition

Win32_LogicalFileAccess

Win32_LogicalFileAuditing

Win32_LogicalFileGroup

Win32_LogicalFileOwner

Win32_LogicalFileSecuritySetting

Win32_LogicalProgramGroup

Win32_LogicalProgramGroupDirectory

Win32_LogicalProgramGroupItem

Win32_LogicalProgramGroupItemDataFile

Win32_LogicalShareAccess

Win32_LogicalShareAuditing

Win32_LogicalShareSecuritySetting

Win32_LogonSession

Win32_LogonSessionMappedDisk

Win32_LUID

Win32_LUIDandAttributes

Win32_MappedLogicalDisk

Win32_MemoryArray

Win32_MemoryArrayLocation

Win32_MemoryDevice

Win32_MemoryDeviceArray

Win32_MemoryDeviceLocation

Win32_MethodParameterClass

Win32_ModuleLoadTrace

Win32_ModuleTrace

Win32_MotherboardDevice

Win32_NamedJobObject

Win32_NamedJobObjectActgInfo

Win32_NamedJobObjectLimit

Win32_NamedJobObjectLimitSetting

Win32_NamedJobObjectProcess

Win32_NamedJobObjectSecLimit

Win32_NamedJobObjectSecLimitSetting

Win32_NamedJobObjectStatistics

Win32_NetworkAdapter

Win32_NetworkAdapterConfiguration

Win32_NetworkAdapterSetting

Win32_NetworkClient

Win32_NetworkConnection

Win32_NetworkLoginProfile

Win32_NetworkProtocol

Win32_NTDomain

Win32_NTEventlogFile

Win32_NTLogEvent

Win32_NTLogEventComputer

Win32_NTLogEventLog

Win32_NTLogEventUser

Win32_OnBoardDevice

Win32_OperatingSystem

Win32_OperatingSystemAutochkSetting

Win32_OperatingSystemQFE

Win32_OSRecoveryConfiguration

Win32_PageFile

Win32_PageFileElementSetting

Win32_PageFileSetting

Win32_PageFileUsage

Win32_ParallelPort

Win32_PCMCIAController

Win32_Perf

Win32_PerfFormattedData

Win32_PerfRawData

Win32_PhysicalMedia

Win32_PhysicalMemory

Win32_PhysicalMemoryArray

Win32_PhysicalMemoryLocation

Win32_PingStatus

Win32_PNPAllocatedResource

Win32_PNPDevice

Win32_PNPEntity

Win32_PointingDevice

Win32_PortableBattery

Win32_PortConnector

Win32_PortResource

Win32_POTSModem

Win32_POTSModemToSerialPort

Win32_PowerManagementEvent

Win32_Printer

Win32_PrinterConfiguration

Win32_PrinterController

Win32_PrinterDriver

Win32_PrinterDriverDll

Win32_PrinterSetting

Win32_PrinterShare

Win32_PrintJob

Win32_PrivilegesStatus

Win32_Process

Win32_Processor

Win32_ProcessStartTrace

Win32_ProcessStartup

Win32_ProcessStopTrace

Win32_ProcessTrace

Win32_ProgramGroupContents

Win32_ProgramGroupOrItem

Win32_ProtocolBinding

Win32_Proxy

Win32_QuickFixEngineering

Win32_QuotaSetting

Win32_Refrigeration

Win32_Registry

Win32_ScheduledJob

Win32_SCSIController

Win32_SCSIControllerDevice

Win32_SecurityDescriptor

Win32_SecuritySetting

Win32_SecuritySettingAccess

Win32_SecuritySettingAuditing

Win32_SecuritySettingGroup

Win32_SecuritySettingOfLogicalFile

Win32_SecuritySettingOfLogicalShare

Win32_SecuritySettingOfObject

Win32_SecuritySettingOwner

Win32_SerialPort

Win32_SerialPortConfiguration

Win32_SerialPortSetting

Win32_ServerConnection

Win32_ServerSession

Win32_Service

Win32_SessionConnection

Win32_SessionProcess

Win32_ShadowBy

Win32_ShadowContext

Win32_ShadowCopy

Win32_ShadowDiffVolumeSupport

Win32_ShadowFor

Win32_ShadowOn

Win32_ShadowProvider

Win32_ShadowStorage

Win32_ShadowVolumeSupport

Win32_Share

Win32_ShareToDirectory

Win32_ShortcutFile

Win32_SID

Win32_SIDandAttributes

Win32_SMBIOSMemory

Win32_SoundDevice

Win32_StartupCommand

Win32_SubDirectory

Win32_SystemAccount

Win32_SystemBIOS

Win32_SystemBootConfiguration

Win32_SystemConfigurationChangeEvent

Win32_SystemDesktop

Win32_SystemDevices

Win32_SystemDriver

Win32_SystemDriverPNPEntity

Win32_SystemEnclosure

Win32_SystemLoadOrderGroups

Win32_SystemMemoryResource

Win32_SystemNetworkConnections

Win32_SystemOperatingSystem

Win32_SystemPartitions

Win32_SystemProcesses

Win32_SystemProgramGroups

Win32_SystemResources

Win32_SystemServices

Win32_SystemSetting

Win32_SystemSlot

Win32_SystemSystemDriver

Win32_SystemTimeZone

Win32_SystemTrace

Win32_SystemUsers

Win32_TapeDrive

Win32_TCPIPPrinterPort

Win32_TemperatureProbe

Win32_Thread

Win32_ThreadStartTrace

Win32_ThreadStopTrace

Win32_ThreadTrace

Win32_TimeZone

Win32_TokenGroups

Win32_TokenPrivileges

Win32_Trustee

Win32_USBController

Win32_USBControllerDevice

Win32_USBHub

Win32_UserAccount

Win32_UserDesktop

Win32_UserInDomain

Win32_UTCTime

Win32_VideoController

Win32_VideoSettings

Win32_VoltageProbe

Win32_Volume

Win32_VolumeChangeEvent

Win32_VolumeQuota

Win32_VolumeQuotaSetting

Win32_VolumeUserQuota

Win32_WindowsProductActivation

Win32_WMIElementSetting

Win32_WMISetting

Older Posts