Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Tool to watch for WMI calls

I am doing some reverse engineering on a 3rd party program that is making some WMI calls to the namespace Root\HP\InstrumentedBIOS. Are there any tools similar to Process Monitor that allows me to monitor WMI calls performed by another application?

like image 501
Scott Chamberlain Avatar asked Sep 03 '25 02:09

Scott Chamberlain


2 Answers

Ignoring the specific application you have in mind, you might want to look into WMI logging/tracing as a way to gain more insight into WMI calls being made at run-time, e.g.:

https://techcommunity.microsoft.com/blog/askperf/wmi-debug-logging/372901

like image 74
reuben Avatar answered Sep 05 '25 19:09

reuben


Starting with windows vista you can use the Event Tracing for Windows (ETW) with the Event Viewer tool, check this MSDN article for more info Tracing WMI Activity.

like image 21
RRUZ Avatar answered Sep 05 '25 19:09

RRUZ