Found while doing forensics on some rediscovered loose flash drives.

  • OfficerBribe
    link
    fedilink
    arrow-up
    11
    ·
    edit-2
    10 months ago

    Get-Disk would have sufficed here, no real need to use WMI here. That said, you would still need to filter USB device and select properties you want to retrieve.

    And unrelated, but if WMI class needs to be queried, Get-CimInstance is the preferred method instead of Get-WmiObject for quite some time.