A short post this time around, with a couple of useful WMIC commands.

 

If you want to determine a file’s version, for instance to see if it was patched, you can use WMIC:

wmic datafile where name="d:\\windows\\system32\\ntdll.dll" get version

 

If you want to see what patches have been installed, WMIC will also show you that information:

wmic qfe list

 

Till next time,

 

Andrew