October 2017
Intermediate to advanced
440 pages
11h 47m
English
WMI classes often have several different associated or related classes--for example, each instance of Win32_Process has an associated class, CIM_DataFile.
Associations between two classes are expressed by a third class. In the case of Win32_Process and CIM_DataFile, the relationship is expressed by the class CIM_ProcessExecutable.
The relationship is defined using the antecedent and dependent properties, as shown in the following example:
PS> Get-CimInstance CIM_ProcessExecutable | Where-Object { $_.Dependent -match $PID } | Select-Object -First 1Antecedent : CIM_DataFile (Name = "C:\WINDOWS\System32\WindowsPowerShell\v...)Dependent : Win32_Process (Handle = "11672")BaseAddress : 2340462460928GlobalProcessCount : ModuleInstance ...Read now
Unlock full access