Solution
This can be extracted using the WMI plugin.
Below are screenshots of a WMI sampler configuration, resulting dataview and the actual Windows folder:
- WMI sampler
-
Where:
-
Class: The WMI namespace to be used. In the above configuration, the namespace CIM_DataFile is used as this contains the data of the files in the Windows OS
- Column: These are the columns or properties of the CIM_DataFile. You can extract the columns of a namespace via Window's wbemtest.exe (C:\Windows\System32\wbem\wbemtest.exe) or via Google
- Restriction:
- This contains the conditions you want to extract from the namespace.
- In the sample above, I wanted to get the file versions of all files with the extension "exe", "awx", "txt", "log", and "zip" in the folder "D:\_binaries\"
-
- Dataview
- Windows folder
Reference
Attached is the sampler XML.
-
Tags:
- windows
- wmi
- howto
Comments
0 comments
Please sign in to leave a comment.