WMI Events

WMI allows triggers (filters) to be set that when satisfied will run scripts or executables.

• Event Filter - Trigger condition

• Event consumer - Script or executable to run

• Binding - Tie together filter + consumer

Filters can be based on time, service start, user auth, file creation etc...

Get-WmiObject