Scott Chamberlain
Scott Chamberlain

Reputation: 127563

Tool to watch for WMI calls

I am doing some reverse engineering on a 3rd party program that is making some WMI calls to the namespace Root\HP\InstrumentedBIOS. Are there any tools similar to Process Monitor that allows me to monitor WMI calls performed by another application?

Upvotes: 4

Views: 6411

Answers (3)

RRUZ
RRUZ

Reputation: 136401

Starting with windows vista you can use the Event Tracing for Windows (ETW) with the Event Viewer tool, check this MSDN article for more info Tracing WMI Activity.

Upvotes: 4

reuben
reuben

Reputation: 3370

Ignoring the specific application you have in mind, you might want to look into WMI logging/tracing as a way to gain more insight into WMI calls being made at run-time, e.g.:

http://blogs.technet.com/b/askperf/archive/2008/03/04/wmi-debug-logging.aspx

Upvotes: 4

Dzek Trek
Dzek Trek

Reputation: 338

WMI Explorer by KS-Soft, is a tool that allows you to explore everything in WMI which includes management classes, objects and their properties on local or remote machines. It can be downloaded from here

Upvotes: -5

Related Questions