Windows Management Instrumentation (WMI) Courses and Certifications

Query management information by using Common Information Model and Windows Management Instrumentation

Learn to query and manage system information using CIM and WMI. Master techniques for accessing repositories, querying instances, connecting to remote computers, and invoking methods to manipulate system configurations.

• Microsoft Learn
• 1 hour 39 minutes
• On-Demand
• Free Online Course

PowerShell for IT Professionals

1 review

Master PowerShell for IT tasks: from basic commands to advanced scripting. Learn file management, Active Directory setup, remote execution, and API integration for efficient system administration.

• YouTube
• 9 hours
• On-Demand
• Free Video

WMI and Powershell

75 ratings at Pluralsight

This course shows you how to use and leverage WMI with Windows PowerShell

• Pluralsight
• 2 hours 30 minutes
• On-Demand
• Free Trial Available

Using WMI and CIM in PowerShell

28 ratings at Pluralsight

This course teaches you how you can use the CIM cmdlets and PowerShell to manage local and remote systems.

• Pluralsight
• 3 hours 32 minutes
• On-Demand
• Free Trial Available

Learn Windows PowerShell in a Month of Lunches

Master Windows PowerShell through hands-on practice and real-world scenarios. Learn essential commands, scripting techniques, and automation skills to boost productivity and streamline system administration tasks.

• YouTube
• 4 hours 30 minutes
• On-Demand
• Free Video

Detecting WMI Exploitation

Learn techniques to detect and prevent WMI exploitation, covering tools, processes, and best practices for enhanced Windows security and threat hunting.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Black Hat

Abusing Windows Management Instrumentation - WMI

Explore WMI's potential for stealthy, persistent attacks on Windows systems. Learn offensive techniques, backdoor creation, and defense strategies against WMI-based threats.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Black Hat

Blasting Event-Driven Cornucopia - WMI-based User-Space Attacks Blind SIEMs and EDRs

Explore advanced techniques to bypass endpoint security products using Windows Management Instrumentation, revealing vulnerabilities in SIEMs and EDRs for improved threat detection and mitigation.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Blinding Endpoint Security Solutions - WMI Attack Vectors

Explore new WMI attack vectors that disable EDR/AV/SIEM solutions. Learn about WmiCheck, a tool for detecting OS attacks. Discuss WMI architecture weaknesses and reliable event collection methods.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Investigating PowerShell Attacks

Explore PowerShell attack techniques, forensic artifacts, and investigation methods for detecting and mitigating threats in Windows environments.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Catching WMI Lateral Movement in an Enterprise Network

Detecting WMI lateral movement in enterprise networks: overview, challenges, and custom IDS fingerprints for improved security. Practical insights for SOC analysts to enhance threat detection capabilities.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk