How to Run a WMI Query in Saner CVEM on Windows Endpoints

Purpose:
This article provides step-by-step instructions to run a WMI (Windows Management Instrumentation) query on Windows endpoints using the Endpoint Management (EM) module in Saner CVEM. This is useful for retrieving system information, verifying configurations, or performing inventory queries.

Steps to Run a WMI Query

1. Access Endpoint Management (EM)

• From the Saner CVEM dashboard, click the Endpoint Management.

2. Go to: Checks > Tools

• Click on the “Checks” tab in the top menu.

• Under Tools, select the WMI tile (icon with Windows toolbox).

3. Fill in the WMI Query Details

You’ll land on the WMI configuration screen.

Enter the following:

✅ Click Update after entering the query.

4. Select Target Devices (Scope)

• Click the Scope tab at the top.

• Choose individual endpoints or a device group to run the query on.

5. Submit the Query

• Click the Submit tab to execute the query on selected devices.

Viewing Results

Once the query is complete:

• Go to the Result tab.

• You’ll see columns like:

  • namespace

  • wql (query text)

  • result (query output)

  • Hosts

  • Device Names

You can also export results using the CSV button on the result page.