Skip to main content
WMI app icon

WMI

This App uses the WMI WQL to implement investigative actions that are executed on a Windows endpointBuilt by Splunk LLC
soar product badge
Default Version 2.1.10

July 21, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3

Rating
5
(1)

Log in to rate this app

Support
Splunk Supported
Ranking

#14 in Endpoint

This App uses the WMI WQL to implement investigative actions that are executed on a Windows endpoint

Supported actions

  • test connectivity: Validate the asset configuration for connectivity
  • list services: Get the list of installed services on the system
  • get system info: Get information about a system
  • list users: List users configured on a system
  • run query: Run an arbitrary query using WQL on the system