 Loading |
|
Loading |
| VBScript |
| JavaScript |
| Powershell |
Search Options: WMI FileIo Query
|
||
|
var wbemFlagReturnImmediately = 0x10;
var wbemFlagForwardOnly = 0x20; var arrComputers = new Array("."); for (i = 0; i < arrComputers.length; i++) { WScript.Echo(); WScript.Echo("=========================================="); WScript.Echo("Computer: " + arrComputers[i]); WScript.Echo("=========================================="); var objWMIService = GetObject("winmgmts:\\\\" + arrComputers[i] + "\\root\\WMI"); var colItems = objWMIService.ExecQuery("SELECT * FROM FileIo", "WQL", wbemFlagReturnImmediately | wbemFlagForwardOnly); var enumItems = new Enumerator(colItems); for (; !enumItems.atEnd(); enumItems.moveNext()) { var objItem = enumItems.item(); try { WScript.Echo("EventGuid: " + (objItem.EventGuid.toArray()).join(",")); } catch(e) { WScript.Echo("EventGuid: null"); } WScript.Echo("EventSize: " + objItem.EventSize); WScript.Echo("EventType: " + objItem.EventType); WScript.Echo("Flags: " + objItem.Flags); WScript.Echo("InstanceId: " + objItem.InstanceId); WScript.Echo("KernelTime: " + objItem.KernelTime); WScript.Echo("MofData: " + objItem.MofData); WScript.Echo("MofLength: " + objItem.MofLength); try { WScript.Echo("ParentGuid: " + (objItem.ParentGuid.toArray()).join(",")); } catch(e) { WScript.Echo("ParentGuid: null"); } WScript.Echo("ParentInstanceId: " + objItem.ParentInstanceId); WScript.Echo("ReservedHeaderField: " + objItem.ReservedHeaderField); WScript.Echo("ThreadId: " + objItem.ThreadId); WScript.Echo("TimeStamp: " + objItem.TimeStamp); WScript.Echo("TraceLevel: " + objItem.TraceLevel); WScript.Echo("TraceVersion: " + objItem.TraceVersion); WScript.Echo("UserTime: " + objItem.UserTime); } } | ||
© 2008 - 2013 Boris Toll :: Scripts available: 6.481 :: :: scriptbox.toll.at :: :: powered by www.toll.at :: | ||
