Branch: master
Find file History
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
..
Failed to load latest commit information.
Demo Video
README.md
WMI_IDS.psm1

README.md

WMI-IDS is a proof-of-concept agent-less host intrusion detection system designed to showcase the unique ability of WMI to respond to and react to operating system events in real-time.

WMI-IDS is a PowerShell module that serves as an installer of WMI events on a local or remote system. The presence of PowerShell is not a requirement on the target system.

Installation

Import-Module <path to WMI_IDS.psm1>

Imports the WMI_IDS PowerShell module and makes its functions publicly accessible.

Get-Command -Module WMI_IDS

Lists the functions exposed in the WMI_IDS module.

Get-Help <function>

Prints the detailed help for any of the WMI_IDS module functions.