Skip to main content
WMI app icon

WMI

This App uses the WMI WQL to implement investigative actions that are executed on a Windows endpointBuilt by Splunk LLC
soar product badge
Default Version 2.1.4

September 17, 2021

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported
Ranking

#3 in Endpoint

This App uses the WMI WQL to implement investigative actions that are executed on a Windows endpoint

Supported actions

  • test connectivity: Validate the asset configuration for connectivity
  • list services: Get the list of installed services on the system
  • get system info: Get information about a system
  • list users: List users configured on a system
  • run query: Run an arbitrary query using WQL on the system