Browse by Tags
All Tags »
WMI (
RSS)
Sorry, but there are no more tags available to filter with.
The previous posts in this series described various mechanisms of communication from the WMI consumer to the WMI provider – including read-only properties , read-write properties and methods . However, publishing events from a WMI provider is the only scalable option of providing changing contextual information as it occurs. Pulling the information on demand is not an option because it doesn’t scale. In this post, we will use the BaseEvent class or the [InstrumentationClass] attribute...
In the previous post in this series, we have looked into implementing a rudimentary WMI provider which exposes read-only information. In this post, we will make our provider more interesting by exposing read-write information. Read-write information is exposed by defining a read-write property and decorating it with the [ManagementConfiguration] attribute. The [ManagementEntity], [ManagementBind] and [ManagementKey] requirements described in the previous post must still hold. The following...
Windows Management Instrumentation (WMI) is a C&C infrastructure that is integrated within Windows. It provides three primary capabilities: Exposing state information regarding a configurable entity Invoking control methods on a configurable entity Publishing events from a configurable entity These facilities are a complete instrumentation solution for any Windows application, and multiple system components expose information through the use of WMI providers. This information can be consumed...