WMI for Script Kiddies

This document is a practical primer on Windows Management Instrumentation (WMI), covering WMI architecture, common tools (WMIC, wbemtest, CIM Studio, WinRM, PowerShell), the WQL query language, and numerous example commands for enumerating users, processes, antivirus products, detecting virtualization, searching files, and creating processes locally or remotely. It explains how WMI can be used for remote administration and automation and notes how those same capabilities can facilitate reconnaissance, lateral movement, and fileless operations when misused.