Scribd
Upload
8 views2 pages

Data Collection Script

The document contains a series of Windows Management Instrumentation Command-line (WMIC) commands to gather detailed system information and save it to text files in a directory named after the computer's name. It collects data on various components such as BIOS, CPU, disk drives, network configurations, and system events. Additionally, it includes commands for network statistics, service queries, and software licensing information.

Uploaded by

Shahim
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
8 views2 pages

Data Collection Script

The document contains a series of Windows Management Instrumentation Command-line (WMIC) commands to gather detailed system information and save it to text files in a directory named after the computer's name. It collects data on various components such as BIOS, CPU, disk drives, network configurations, and system events. Additionally, it includes commands for network statistics, service queries, and software licensing information.

Uploaded by

Shahim
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 2

md c:\%computername%

echo on
wmic baseboard get * /format:list > C:\%computername%\baseboard.txt
wmic bios get * /format:list > C:\%computername%\bios.txt
wmic bootconfig get * /format:list > C:\%computername%\bootconfig.txt
wmic cdrom get * /format:list > C:\%computername%\cdrom.txt
wmic computersystem get * /format:list > C:\%computername%\computersystem.txt
wmic cpu get * /format:list > C:\%computername%\cpu.txt
wmic datafile where name='c:\boot.ini' get Archive, FileSize, FileType,
InstallDate, Readable, Writeable, System, Version /format:list > C:\%computername
%\datafile.txt
wmic dcomapp get * /format:list > C:\%computername%\dcomapp.txt
wmic desktop get * /format:list > C:\%computername%\desktop.txt
wmic desktopmonitor get * /format:list > C:\%computername%\desktopmonitor.txt
wmic diskdrive get * /format:list > C:\%computername%\diskdrive.txt
wmic diskquota get * /format:list > C:\%computername%\diskquota.txt
wmic environment get * /format:list > C:\%computername%\environment.txt
wmic fsdir where name='c:\windows' get Archive, CreationDate, LastModified,
Readable, Writeable, System, Hidden, Status /format:list > C:\%computername%\
fsdir.txt
wmic group get * /format:list > C:\%computername%\group.txt
wmic idecontroller get * /format:list > C:\%computername%\idecontroller.txt
wmic irq get * /format:list > C:\%computername%\irq.txt
wmic job get * /format:list > C:\%computername%\job.txt
wmic loadorder get * /format:list > C:\%computername%\loadorder.txt
wmic logicaldisk get * /format:list > C:\%computername%\logicaldisk.txt
wmic memcache get * /format:list > C:\%computername%\memcache.txt
wmic memlogical get * /format:list > C:\%computername%\memlogical.txt
wmic memphysical get * /format:list > C:\%computername%\memphysical.txt
wmic netclient get * /format:list > C:\%computername%\netclient.txt
wmic netlogin get * /format:list > C:\%computername%\netlogin.txt
wmic netprotocol get * /format:list > C:\%computername%\netprotocol.txt
wmic netuse get * /format:list > C:\%computername%\netuse.txt
wmic nic get * /format:list > C:\%computername%\nic.txt
wmic nicconfig get * /format:list > C:\%computername%\nicconfig.txt
wmic nicconfig get * /format:list > C:\%computername%\nicconfig.txt
wmic nicconfig get * /format:list > C:\%computername%\nicconfig.txt
wmic nicconfig get * /format:list > C:\%computername%\nicconfig.txt
wmic ntdomain get * /format:list > C:\%computername%\ntdomain.txt
wmic ntevent where (LogFile='system' and SourceName='W32Time') get Message,
TimeGenerated /format:list > C:\%computername%\ntevent1.txt
wmic ntevent where (LogFile='system' and SourceName='W32Time' and Message like
'%timesource%') get Message, TimeGenerated /format:list > C:\%computername%\
ntevent2.txt
wmic ntevent where (LogFile='system' and SourceName='W32Time' and EventCode!='29')
get TimeGenerated, EventCode, Message /format:list > C:\%computername%\
ntevent3.txt
wmic ntevent where (LogFile='system' and EventCode='41') get TimeGenerated,
EventCode, Message /format:list > C:\%computername%\ntevent41.txt
wmic ntevent where (LogFile='system' and EventCode='1074') get TimeGenerated,
EventCode, Message /format:list > C:\%computername%\ntevent1074.txt
wmic ntevent where (LogFile='system' and EventCode='1076') get TimeGenerated,
EventCode, Message /format:list > C:\%computername%\ntevent1076.txt
wmic ntevent where (LogFile='system' and EventCode='6008') get TimeGenerated,
EventCode, Message /format:list > C:\%computername%\ntevent6008.txt
wmic onboarddevice get * /format:list > C:\%computername%\onboarddevice.txt
wmic os get * /format:list > C:\%computername%\os.txt
wmic os get * /format:list > C:\%computername%\os.txt
wmic pagefile get * /format:list > C:\%computername%\pagefile.txt
wmic pagefileset get * /format:list > C:\%computername%\pagefileset.txt
wmic partition get * /format:list > C:\%computername%\partition.txt
wmic printer get * /format:list > C:\%computername%\printer.txt
wmic printjob get * /format:list > C:\%computername%\printjob.txt
wmic process get * /format:list > C:\%computername%\process.txt
wmic product get * /format:list > C:\%computername%\product.txt
wmic qfe get * /format:list > C:\%computername%\qfe.txt
wmic quotasetting get * /format:list > C:\%computername%\quotasetting.txt
wmic recoveros get * /format:list > C:\%computername%\recoveros.txt
wmic Registry get * /format:list > C:\%computername%\Registry.txt
wmic scsicontroller get * /format:list > C:\%computername%\scsicontroller.txt
wmic server get * /format:list > C:\%computername%\server.txt
wmic service get * /format:list > C:\%computername%\service.txt
wmic share get * /format:list > C:\%computername%\share.txt
wmic sounddev get * /format:list > C:\%computername%\sounddev.txt
wmic startup get * /format:list > C:\%computername%\startup.txt
wmic sysaccount get * /format:list > C:\%computername%\sysaccount.txt
wmic sysdriver get * /format:list > C:\%computername%\sysdriver.txt
wmic systemenclosure get * /format:list > C:\%computername%\systemenclosure.txt
wmic systemslot get * /format:list > C:\%computername%\systemslot.txt
wmic tapedrive get * /format:list > C:\%computername%\tapedrive.txt
wmic timezone get * /format:list > C:\%computername%\timezone.txt
wmic useraccount get * /format:list > C:\%computername%\useraccount.txt
wmic memorychip get BankLabel, Capacity, Caption, CreationClassName, DataWidth,
Description, Devicelocator, FormFactor, HotSwappable, InstallDate,
InterleaveDataDepth, InterleavePosition, Manufacturer, MemoryType, Model, Name,
OtherIdentifyingInfo, PartNumber, PositionInRow, PoweredOn, Removable, Replaceable,
SerialNumber, SKU, Speed, Status, Tag, TotalWidth, TypeDetail, Version /format:list
> C:\%computername%\memorychip.txt
ipconfig /all > c:\%computername%\ipconfig.txt
netstat > c:\%computername%\netstat.txt
sc query > c:\%computername%\sc.txt
systeminfo > c:\%computername%\systeminfo.txt
tasklist > c:\%computername%\tasklist.txt
tasklist /svc > c:\%computername%\tasklist_svc.txt
cscript c:\windows\system32\slmgr.vbs /dlv > c:\%computername%\slmgr.txt
cscript "c:\program files\microsoft office\office16\ospp.vbs" /dstatusall > c:\
%computername%\ospp.txt
systeminfo > c:\%computername%\systeminfo.txt
pause

You might also like