The Seven Secrets of CIM
summary
Walks through concrete commands and outcomes: uses Get-CimClass to inspect methods and properties, uses Get-CimInstance with CimSessions that mix WSMan and DCOM, finds the Win32 quota property memoryPerHost (default 512 on Vista-era systems, 128 on XP/2003), performs recursive namespace searches, reads installed-software keys via StdRegProv against HKLM registry hives, and launches remote uninstalls with Win32_Process Create — demos run successfully and warn that the technique can remove software across many machines.
AI-written summary · about
chapters (11)
- 0:00Start
- 0:49Agenda
- 1:53Terminology
- 3:16Basic Training
- 7:06Discovery Techniques
- 9:55Recursive Search
- 11:18Scenario 1
- 14:07Lab Credentials
- 16:09Create a Sim Session Protocol
- 16:47Splat
- 37:42Using Wmi To Uninstall Software
related talks
25mCIM Sessions
01h 24mWindows Native API
26mSuperpowers for Windows Containers
59mCross-Platform Pitfalls and How to Avoid Them
01h 05mHow to Survive the Hardware Assisted Control-Flow Integrity Enforcement
01h 03mA Gopher's Guide to *NIX Plumbing
16mMy Favorite 5 Command Line Tools
01h 01mInternals of Exceptions