WMI Node Info Scan

Gathering Capabilities

Hardware

  • Motherboard
    • Chassis Type
    • Manufacturer
    • CPU Name
    • CPU Manufacturer
    • Revision
    • Battery
  • Memory Info
    • Total
    • Used
    • % Used
  • Storage Devices
    • Device Name
    • Device Type
    • Unique #
    • File System
    • Capacity
    • Used Capacity
    • % Used
  • USB Devices
    • Class Name
    • Device Name
    • Manufacturer
    • State

Operating System

  • Operating System
    • Operating System Name
    • Version
    • Build Version
    • Service Pack
    • Most Recent Update Time
    • Language
    • User
    • Organization
    • Computer Name
    • Domain
    • Install Time
    • Uptime
  • User
    • User Name
    • Account Type
    • Password Settings
    • Login Status
  • Screensaver
    • Enabled/Disabled
    • Password Settings
    • Wait Time
    • Name

Network

  • Interface
    • Name
    • Connection Method
    • MAC
    • Device Name
    • Link
    • Speed
    • Promiscuity
  • IPv4 Settings
    • Name
    • IPv4
    • IP/Netmask
    • Gateway
    • Primary/Secondary DNS
  • IPv6 Settings
    • Name
    • IPv6
    • IPv6 Address
    • IPv6 Link Local

Folder Sharing

  • Share Information
    • Share Name
    • Type
    • Path
    • Details
    • Detection Time

Printer

  • Printer
    • Name
    • Device Name
    • Port Information

Software

  • Software Information
    • Program Name
    • Version
    • Path
    • Installation Date
    • Detection Time
  • Antivirus Information

Configuring WMI Node Info Collection

Configure Pre-Requisite settings

  1. Ensure that the target machines are domain joined.
  2. Allow for endpoint/ domain accounts to respond to WMI Query.
  3. Enter Bind DN and Password for privileged Domain account under Preferences > Authentication Integrtation > LDAP Server.

Enable WMI Scan

  1. Navigate to the System tab and select the desired sensor.
  2. Select the Sensor tab, and then select the Interface you wish to configure.
  3. Under Node Information Scan, enable Port / Service Scan and then enable WMI Information Scan

Note

The WMI scan only operates on nodes without an installed agent. If you wish to collect info with an agent, See: Collecting Windows System Information using WMI