Get-WmiObject -Namespace ROOTCIMV2 -Class Win32_Share #共享 Get-WmiObject -Namespace ROOTCIMV2 -Class CIM_DataFile #⽂件/⽬录列表 Get-WmiObject -Namespace ROOTCIMV2 -Class Win32_Volume #磁盘卷列表 Get-WmiObject -Namespace ROOTCIMV2 -Class Win32_Process #当前进程 Get-WmiObject -Namespace ROOTCIMV2 -Class Win32_Service #列举服务 Get-WmiObject -Namespace ROOTCIMV2 -Class Win32_NtLogEvent #⽇志 Get-WmiObject -Namespace ROOTCIMV2 -Class Win32_LoggedOnUser #登陆账户 Get-WmiObject -Namespace ROOTCIMV2 -Class Win32_QuickFixEngineering #补丁 Get-WmiObject -Namespace rootSecurityCenter2 -Class AntiVirusProduct #杀毒软件
###操作系统相关信息 Get-WmiObject -Namespace ROOTCIMV2 -Class Win32_OperatingSystem Get-WmiObject -Namespace ROOTCIMV2 -Class Win32_ComputerSystem Get-WmiObject -Namespace ROOTCIMV2 -Class Win32_BIOS ###
###注册表操作 Get-WmiObject -Namespace ROOTDEFAULT -Class StdRegProv
Push-Location HKLM:SOFTWAREMicrosoftWindowsCurrentVersionRun Get-ItemProperty OptionalComponents