Wednesday, July 6, 2011

WSH Ruby WMI Example Using ExecNotificationQuery With __InstanceDeletionEvent

You can download the scripting program for generating these scripts at:

http://www.planetmps.com/wmiscriptsENQ_D.html

<?xml version='1.0' encoding='iso-8859-1'?>
<package>
<job>
<script language="ruby">
<![CDATA[
require("win32ole")
i=0
locator = WIN32OLE.new("WbemScripting.SWbemLocator")
svc = locator.connectserver()
svc.Security_.AuthenticationLevel = 0
svc.Security_.ImpersonationLevel = 3
objs = svc.ExecNotificationQuery("Select * From __InstanceDeletionEvent WITHIN 1 where targetInstance ISA 'Win32_Process'")
mystr = ""
objs.each{ |obj|
    obj.Properties_.each{ |prop|

End
End

]]>
</script>
</job>
</package>

No comments:

Post a Comment