â Motherboard / Baseboard Info
wmic baseboard get Manufacturer, Product, SerialNumber
āĻāĻāĻāĻĒā§āĻ: Manufacturer: HP / Dell / Lenovo
āĻĒāĻžāϏ: āĻ
āϰāĻŋāĻāĻŋāύāĻžāϞ āĻā§āĻŽā§āĻĒāĻžāύāĻŋāϰ āύāĻžāĻŽ āĻĻā§āĻāĻžāĻŦā§āĨ¤
āĻĢā§āϞ: 'Unknown' āĻŦāĻž 'To be filled by OEM' āĻĨāĻžāĻāϞ⧠āĻŽāĻžāĻĻāĻžāϰāĻŦā§āϰā§āĻĄ āĻā§āĻā§āĻ āĻāϰāĻžāĨ¤
â
Copied!
â BIOS Serial Number
wmic bios get serialnumber
āĻāĻāĻāĻĒā§āĻ: SerialNumber: 5CD...
āĻĒāĻžāϏ: āϞā§āϝāĻžāĻĒāĻāĻĒā§āϰ āĻĒā§āĻāύā§āϰ āϏā§āĻāĻŋāĻāĻžāϰā§āϰ āϏāĻžāĻĨā§ āĻšā§āĻŦāĻšā§ āĻŽāĻŋāϞāĻŦā§āĨ¤
āĻĢā§āϞ: āύāĻž āĻŽāĻŋāϞāϞ⧠āĻŦāĻĄāĻŋ āĻŦāĻž āĻŽāĻžāĻĻāĻžāϰāĻŦā§āϰā§āĻĄ āĻĒāϰāĻŋāĻŦāϰā§āϤāύ āĻāϰāĻž āĻšā§ā§āĻā§āĨ¤
â
Copied!
â System Model + SKU
wmic computersystem get Model, SystemSKUNumber
āĻāĻāĻāĻĒā§āĻ: Model: EliteBook... SystemSKU: [Code]
āĻĒāĻžāϏ: āĻ
āϰāĻŋāĻāĻŋāύāĻžāϞ āĻŽāĻĄā§āϞ āĻ SKU āĻĻā§āĻāĻžāĻŦā§āĨ¤
āĻĢā§āϞ: āĻā§āϞ āĻŽāĻĄā§āϞ āĻŦāĻž SKU āĻŽāĻŋāϏāĻŋāĻ āĻĨāĻžāĻāϞ⧠āĻŦāĻžā§ā§āϏ āĻŽāĻĄāĻŋāĻĢāĻžāĻ āĻāϰāĻžāĨ¤
â
Copied!
â CPU Model
wmic cpu get name
āĻāĻāĻāĻĒā§āĻ: Intel Core i7... / AMD Ryzen...
āĻĒāĻžāϏ: āĻāύāĻĢāĻŋāĻāĻžāϰā§āĻļāύā§āϰ āϏāĻžāĻĨā§ āĻĒā§āϰāϏā§āϏāϰā§āϰ āύāĻžāĻŽ ā§§ā§Ļā§Ļ% āĻŽāĻŋāϞāĻŦā§āĨ¤
â
Copied!
â GPU / Graphics Info
wmic path win32_VideoController get name
āĻāĻāĻāĻĒā§āĻ: Intel UHD / NVIDIA / AMD
āĻĒāĻžāϏ: āĻā§āϰāĻžāĻĢāĻŋāĻā§āϏ āĻāĻžāϰā§āĻĄā§āϰ āĻ
āϰāĻŋāĻāĻŋāύāĻžāϞ āύāĻžāĻŽ āĻĻā§āĻāĻžāĻŦā§āĨ¤
āĻĢā§āϞ: 'Microsoft Basic Display Adapter' āĻĻā§āĻāĻžāϞ⧠āĻā§āϰāĻžāĻĢāĻŋāĻā§āϏ āĻāĻŋāĻĒ āύāώā§āĻāĨ¤
â
Copied!
â RAM Info (Brand + Part Number)
wmic memorychip get Manufacturer, PartNumber, Speed, SerialNumber
āĻāĻāĻāĻĒā§āĻ: Manufacturer: Samsung / Hynix
āĻĒāĻžāϏ: āĻŦā§āϰā§āϝāĻžāύā§āĻĄā§āϰ āύāĻžāĻŽ āĻ āĻĒāĻžāϰā§āĻ āύāĻžāĻŽā§āĻŦāĻžāϰ āĻĨāĻžāĻāĻŦā§āĨ¤
āĻĢā§āϞ: 'Unknown' āϞā§āĻāĻž āĻĨāĻžāĻāϞ⧠āϞā§āĻāĻžāϞ/āύāĻāϞ āϰâā§āϝāĻžāĻŽ āϞāĻžāĻāĻžāύā§āĨ¤
â
Copied!
â SSD Model + Status + Serial
wmic diskdrive get model,status,serialnumber
āĻāĻāĻāĻĒā§āĻ: Status: OK
āĻĒāĻžāϏ: OK āϞā§āĻāĻž āĻĨāĻžāĻāϞ⧠āĻšā§āϞāĻĨ ā§§ā§Ļā§Ļ% āĻ āĻŋāĻ āĻāĻā§āĨ¤
āĻĢā§āϞ: 'Pred Fail' āĻŦāĻž Error āϞā§āĻāĻž āĻĨāĻžāĻāϞ⧠āĻāϏāĻāϏāĻĄāĻŋ āύāώā§āĻ āĻšāĻā§āĻžāϰ āĻĒāĻĨā§āĨ¤
â
Copied!
â Battery Manufacturer + Chemistry
wmic path Win32_Battery get Manufacturer, Name, Chemistry
āĻāĻāĻāĻĒā§āĻ: Manufacturer: HP/SMP/LGC
āĻĒāĻžāϏ: āĻ
āϰāĻŋāĻāĻŋāύāĻžāϞ āĻā§āύā§āĻĄāϰā§āϰ āύāĻžāĻŽ āĻĻā§āĻāĻžāĻŦā§āĨ¤
â
Copied!
â Windows Activation
slmgr /xpr
āĻāĻāĻāĻĒā§āĻ: āĻāĻāĻāĻŋ āĻĒāĻĒ-āĻāĻĒ āĻāϏāĻŦā§āĨ¤
āĻĒāĻžāϏ: 'Permanently activated' āϞā§āĻāĻž āĻĨāĻžāĻāϞ⧠āĻ
āϰāĻŋāĻāĻŋāύāĻžāϞāĨ¤
āĻĢā§āϞ: āĻĄā§āĻ āĻŦāĻž āĻŽā§ā§āĻžāĻĻ āϞā§āĻāĻž āĻĨāĻžāĻāϞ⧠āϏā§āĻāĻŋ āĻā§āϰā§āϝāĻžāĻ āĻāϰāĻž āĻāĻāύā§āĻĄā§āĻāĨ¤
â
Copied!
â Battery Health Report
powercfg /batteryreport
āĻāĻāĻāĻĒā§āĻ: āĻāĻāĻāĻŋ HTML āĻĢāĻžāĻāϞ āϤā§āϰāĻŋ āĻšāĻŦā§āĨ¤
āĻĒāĻžāϏ: Cycle Count ā§Šā§Ļā§Ļ āĻāϰ āύāĻŋāĻā§ āĻšāϞ⧠āĻāĻžāϞā§āĨ¤
āĻĢā§āϞ: Cycle Count ā§Žā§Ļā§Ļ+ āĻšāϞ⧠āĻŦā§āϝāĻžāĻāĻžāϰāĻŋ āĻĒāϰāĻŋāĻŦāϰā§āϤāύ āĻāϰāϤ⧠āĻšāĻŦā§āĨ¤
â
Copied!
â Network Adapter (WiFi Check)
wmic nic get Name, Manufacturer
āĻāĻāĻāĻĒā§āĻ: Intel Wireless-AC...
āĻĒāĻžāϏ: āĻ
āϰāĻŋāĻāĻŋāύāĻžāϞ āĻ
ā§āϝāĻžāĻĄāĻžāĻĒā§āĻāĻžāϰ āĻĻā§āĻāĻžāĻŦā§āĨ¤
āĻĢā§āϞ: 'Generic USB' āĻĻā§āĻāĻžāϞ⧠āĻā§āϤāϰā§āϰ āĻāϏāϞ āĻā§āĻžāĻāĻĢāĻžāĻ āĻŽāĻĄāĻŋāĻāϞ āύāώā§āĻāĨ¤
â
Copied!
â Storage Controller Info
wmic storage get *
āĻāĻāĻāĻĒā§āĻ: āϏā§āĻā§āϰā§āĻ āĻāύā§āĻā§āϰā§āϞāĻžāϰā§āϰ āĻĄāĻŋāĻā§āĻāϞāϏāĨ¤
āĻĒāĻžāϏ: Standard NVMe āĻŦāĻž SATA āĻāύā§āĻā§āϰā§āϞāĻžāϰ āĻĻā§āĻāĻžāĻŦā§āĨ¤
â
Copied!
â RAM Slot Count
wmic memphysical get MaxCapacity, MemoryDevices
āĻāĻāĻāĻĒā§āĻ: MemoryDevices: 2
āĻĒāĻžāϏ: ⧍ āĻŦāĻž āϤāϤā§āϧāĻŋāĻ āϏā§āϞāĻ āĻĨāĻžāĻāϞ⧠āϰâā§āϝāĻžāĻŽ āĻŦāĻžā§āĻžāύ⧠āϝāĻžāĻŦā§āĨ¤
āĻā§āĻžāϰā§āύāĻŋāĻ: ā§§ āĻĻā§āĻāĻžāϞ⧠āϰâā§āϝāĻžāĻŽ āϏā§āϞā§āĻĄāĻžāϰ āĻāϰāĻž (āĻŦāĻžā§āĻžāύ⧠āϝāĻžāĻŦā§ āύāĻž)āĨ¤
â
Copied!
â OS Build + Version
wmic os get Caption, Version, BuildNumber
āĻāĻāĻāĻĒā§āĻ: Windows 10/11 Pro, Version details.
āĻĒāĻžāϏ: āϏāĻ āĻŋāĻ āĻāĻāύā§āĻĄā§āĻ āĻāĻžāϰā§āϏāύ āĻĻā§āĻāĻžāĻŦā§āĨ¤
â
Copied!
â Thermal Sensor (Live Temp)
wmic /namespace:\\root\wmi path MSAcpi_ThermalZoneTemperature get CurrentTemperature
āĻāĻāĻāĻĒā§āĻ: 2980 (āĻā§āϞāĻāĻŋāύā§)
āĻĒāĻžāϏ: āĻāĻ āϏāĻāĻā§āϝāĻž āĻĨā§āĻ⧠⧍ā§ā§Š.ā§§ā§Ģ āĻŦāĻŋā§ā§āĻ āĻāϰāϞ⧠āĻŦāϰā§āϤāĻŽāĻžāύ āϏā§āϞāϏāĻŋā§āĻžāϏ āĻā§āĻŽā§āĻĒāĻžāϰā§āĻāĻžāϰ āĻĒāĻžāĻā§āĻž āϝāĻžāĻŦā§āĨ¤
â
Copied!
â BIOS Version + Release Date
wmic bios get smbiosbiosversion, releasedate
āĻāĻāĻāĻĒā§āĻ: BIOS Date (e.g., 20231015)
āĻĒāĻžāϏ: āĻŦāĻžā§ā§āϏ āĻāĻŦā§ āĻāĻĒāĻĄā§āĻ āĻšā§ā§āĻā§ āϤāĻž āĻĻā§āĻāĻž āϝāĻžāĻŦā§āĨ¤
â
Copied!
â Boot Configuration
bcdedit /enum
āĻāĻāĻāĻĒā§āĻ: Windows Boot Manager.
āĻĒāĻžāϏ: āϏāĻžāϧāĻžāϰāĻŖ āĻāĻāύā§āĻĄā§āĻ āĻŦā§āĻ āĻĻā§āĻāĻžāĻŦā§āĨ¤
āĻĢā§āϞ: āϞāĻŋāύāĻžāĻā§āϏ āĻŦāĻž āϰāĻŋāĻāĻāĻžāϰāĻŋ āϏā§āĻā§āϰāĻŋāĻĒā§āĻ āĻĨāĻžāĻāϞ⧠āϏāύā§āĻĻā§āĻšāĻāύāĻāĨ¤
â
Copied!
â PCI Devices List (Fake Hardware Catch)
wmic path win32_pnpentity get Name, Manufacturer
āĻāĻāĻāĻĒā§āĻ: āϏāĻŦ āĻāĻžāύā§āĻā§āĻā§āĻĄ āĻĄāĻŋāĻāĻžāĻāϏā§āϰ āύāĻžāĻŽāĨ¤
āĻĒāĻžāϏ: āĻ
āϰāĻŋāĻāĻŋāύāĻžāϞ āĻāύā§āĻāĻžāϰāύāĻžāϞ āĻŽāĻĄāĻŋāĻāϞāĻā§āϞ⧠āĻĻā§āĻāĻžāĻŦā§āĨ¤
â
Copied!
â USB Controller List
wmic path win32_usbcontroller get Name, Manufacturer
āĻāĻāĻāĻĒā§āĻ: USB Hubs.
āĻĢā§āϞ: āĻā§āύ⧠Unknown Device āĻĨāĻžāĻāϞ⧠āĻĒā§āϰā§āĻā§ āĻļāϰā§āĻ āĻŦāĻž āϏāĻŽāϏā§āϝāĻž āĻāĻā§āĨ¤
â
Copied!
â Fan Controller Status
wmic path Win32_Fan get Name, Status
āĻāĻāĻāĻĒā§āĻ: Status: OK.
āĻĒāĻžāϏ: āĻĢā§āϝāĻžāύ āĻ āĻŋāĻ āĻāĻā§ (āϏāĻŦ āĻŽāĻĄā§āϞ⧠āϏāĻžāĻĒā§āϰā§āĻ āĻāϰ⧠āύāĻž)āĨ¤
â
Copied!
â TPM Status (Corporate lock check)
wmic /namespace:\\root\cimv2\security\microsofttpm path win32_tpm get *
āĻāĻāĻāĻĒā§āĻ: IsActivated: TRUE
āĻĒāĻžāϏ: TRUE āĻĨāĻžāĻāϞ⧠āϏāĻŋāĻāĻŋāĻāϰāĻŋāĻāĻŋ āĻāĻŋāĻĒ āĻ āĻŋāĻ āĻāĻā§āĨ¤
āĻĢā§āϞ: 'No Instance' āĻāϏāϞ⧠āĻāĻŋāĻĒ āύāώā§āĻ, Win 11 āĻāϞāĻŦā§ āύāĻžāĨ¤
â
Copied!
â BitLocker Status
manage-bde -status
āĻāĻāĻāĻĒā§āĻ: Protection Status: Protection Off
āĻĒāĻžāϏ: Off āĻĨāĻžāĻāϞ⧠āĻļāĻžāύā§āϤāĻŋāĻŽāϤ⧠āĻāĻāύā§āĻĄā§āĻ āĻĻāĻŋāϤ⧠āĻĒāĻžāϰāĻŦā§āύāĨ¤
āĻĢā§āϞ: On āĻĨāĻžāĻāϞ⧠āĻĒāϰ⧠āĻšāĻžāϰā§āĻĄāĻĄāĻŋāϏā§āĻ āϞāĻ āĻšā§ā§ Key āĻāĻžāĻāϤ⧠āĻĒāĻžāϰā§āĨ¤
â
Copied!
â SecureBoot Status
powershell Confirm-SecureBootUEFI
āĻāĻāĻāĻĒā§āĻ: True
āĻĒāĻžāϏ: āϞā§āϝāĻžāĻĒāĻāĻĒā§āϰ āϏāĻŋāĻāĻŋāĻāϰ āĻŦā§āĻ āĻ
āύ āĻāĻā§, āĻŽā§āϝāĻžāϞāĻā§ā§āϝāĻžāϰ āĻĸā§āĻāϤ⧠āĻĒāĻžāϰāĻŦā§ āύāĻžāĨ¤
â
Copied!
â BIOS SecureBoot Policy
powershell Get-SecureBootPolicy
āĻāĻāĻāĻĒā§āĻ: Policy details.
āĻĒāĻžāϏ: āĻŽāĻžāĻāĻā§āϰā§āϏāĻĢāĻā§āϰ āĻĄāĻŋāĻĢāϞā§āĻ āĻĒāϞāĻŋāϏāĻŋ āĻĻā§āĻāĻžāĻŦā§āĨ¤
â
Copied!
â Partition Info
wmic partition get Name, Size, Type
āĻāĻāĻāĻĒā§āĻ: Partition list.
āĻĢā§āϞ: 50GB+ āϏāĻžāĻāĻā§āϰ āĻā§āύ⧠āĻšāĻŋāĻĄā§āύ āĻĒāĻžāϰā§āĻāĻŋāĻļāύ āĻĨāĻžāĻāϞ⧠āϏā§āĻāĻž āĻāϰā§āĻĒā§āϰā§āĻ āĻā§āϰā§āϝāĻžāĻāĻŋāĻ/āϞāĻ āĻšāϤ⧠āĻĒāĻžāϰā§āĨ¤
â
Copied!
â Logical Disk Info
wmic logicaldisk get name, description, filesystem, freespace, size
āĻāĻāĻāĻĒā§āĻ: C:, D: Drives info.
āĻĒāĻžāϏ: āϏāĻ āĻŋāĻ āϏā§āĻā§āϰā§āĻ āϏāĻžāĻāĻ āĻĻā§āĻāĻžāĻŦā§āĨ¤
â
Copied!
â SMART Status (SSD Health)
wmic diskdrive get status
āĻāĻāĻāĻĒā§āĻ: Status: OK
āĻĒāĻžāϏ: āϏā§āĻā§āϰā§āĻ āĻĄā§āϰāĻžāĻāĻ āϏā§āϏā§āĻĨ āĻāĻā§āĨ¤
â
Copied!
â Volume Info
wmic volume get DriveLetter, Label, Capacity, FreeSpace
āĻāĻāĻāĻĒā§āĻ: āĻāϞāĻŋāĻāĻŽā§āϰ āϤāĻĨā§āϝāĨ¤
â
Copied!
â Running Processes
tasklist
āĻāĻāĻāĻĒā§āĻ: āϰāĻžāύāĻŋāĻ āĻĒā§āϰāϏā§āϏ āϞāĻŋāϏā§āĻāĨ¤
â
Copied!
â Startup Programs
wmic startup get Caption, Command
āĻāĻāĻāĻĒā§āĻ: āĻĒāĻŋāϏāĻŋ āĻ
āύ āĻšāϞ⧠āϝāĻž āϝāĻž āĻāĻĒā§āύ āĻšā§āĨ¤
āĻĢā§āϞ: āĻā§āύ⧠āĻāĻžā§āύāĻŋāĻ āĻŦāĻž āϏāύā§āĻĻā§āĻšāĻāύāĻ .exe āĻĨāĻžāĻāϞ⧠āĻŽā§āϝāĻžāϞāĻā§ā§āϝāĻžāϰ āĻšāϤ⧠āĻĒāĻžāϰā§āĨ¤
â
Copied!
â System Boot Time
wmic os get lastbootuptime
āĻāĻāĻāĻĒā§āĻ: āĻļā§āώāĻŦāĻžāϰ āĻāĻāύ āĻ
āύ āĻšā§ā§āĻā§ āϤāĻžāϰ āĻāĻžāĻāĻŽāϏā§āĻā§āϝāĻžāĻŽā§āĻĒāĨ¤
â
Copied!
â Power Plan Info
powercfg /l
āĻāĻāĻāĻĒā§āĻ: Balanced / High Performance.
â
Copied!
â Thermal Event Log (Overheating)
wevtutil qe System /q:"*[System[(EventID=13)]]" /f:text /c:5
āĻāĻāĻāĻĒā§āĻ: No logs / Blank
āĻĒāĻžāϏ: āĻĢāĻžāĻāĻāĻž āĻĨāĻžāĻāϞ⧠āϞā§āϝāĻžāĻĒāĻāĻĒ āĻ
āϤāĻŋāϰāĻŋāĻā§āϤ āĻāϰāĻŽ āĻšā§ āύāĻžāĨ¤
āĻĢā§āϞ: āϞāĻ āĻĻā§āĻāĻžāϞ⧠āĻā§āϞāĻŋāĻ āĻĢā§āϝāĻžāύ āύāώā§āĻ āĻŦāĻž āĻĒā§āϰāϏā§āϏāϰ āĻāĻāĻžāϰāĻšāĻŋāĻ āĻšā§āĨ¤
â
Copied!
â Corporate Domain Check
wmic computersystem get domain
āĻāĻāĻāĻĒā§āĻ: Domain: WORKGROUP
āĻĒāĻžāϏ: WORKGROUP āĻĨāĻžāĻāϞ⧠āĻĒāĻžāϰā§āϏā§āύāĻžāϞ āϞā§āϝāĻžāĻĒāĻāĻĒāĨ¤
āĻĢā§āϞ: āĻā§āĻŽā§āĻĒāĻžāύāĻŋāϰ āύāĻžāĻŽ āĻĨāĻžāĻāϞ⧠āĻāĻāĻŋ āϞāĻ āĻāϰāĻž āĻŦāĻž āĻā§āϰāĻŋ āĻšāĻā§āĻžāĨ¤
â
Copied!
â Motherboard UUID (Tampering Check)
wmic csproduct get UUID
āĻāĻāĻāĻĒā§āĻ: āĻāĻāύāĻŋāĻ 32 āĻā§āϝāĻžāϰā§āĻā§āĻāĻžāϰ āĻā§āĻĄāĨ¤
āĻĒāĻžāϏ: āĻā§āĻĄ āĻĻā§āĻāĻžāϞ⧠āĻ āĻŋāĻ āĻāĻā§āĨ¤
āĻĢā§āϞ: FFFFFFFF... āĻĻā§āĻāĻžāϞ⧠āĻ
āϰāĻŋāĻāĻŋāύāĻžāϞ āĻŽāĻžāĻĻāĻžāϰāĻŦā§āϰā§āĻĄā§āϰ āĻāĻāĻĄā§āύā§āĻāĻŋāĻāĻŋ āĻŽā§āĻā§ āĻĢā§āϞāĻž āĻšā§ā§āĻā§āĨ¤
â
Copied!
â BIOS Mode (UEFI / Legacy)
powershell Get-ItemProperty -Path HKLM:\SYSTEM\CurrentControlSet\Control\ -Name PEFirmwareType
āĻāĻāĻāĻĒā§āĻ: Value: 2 (UEFI)
āĻĒāĻžāϏ: 2 āĻŽāĻžāύ⧠āĻāϧā§āύāĻŋāĻ UEFI āĻŽā§āĻĄāĨ¤
â
Copied!
â Hardware Error Log
wmic path Win32_ComputerSystem get Name,Status
āĻāĻāĻāĻĒā§āĻ: Status: OK
āĻĒāĻžāϏ: āϏāĻŋāϏā§āĻā§āĻŽ āϏā§āĻā§āϝāĻžāĻāĻžāϏ āϏā§āϏā§āĻĨāĨ¤
â
Copied!
â System Uptime & Shutdown Stats
net statistics workstation
āĻāĻāĻāĻĒā§āĻ: āϞā§āϝāĻžāĻĒāĻāĻĒā§āϰ āϰāĻžāύāĻŋāĻ āϏā§āĻā§āϝāĻžāĻāĻžāϏāĨ¤
â
Copied!
â Disabled or Dead Components
wmic path win32_pnpentity where "Status<>'OK'" get Name, Status
āĻāĻāĻāĻĒā§āĻ: No Instance(s) Available
āĻĒāĻžāϏ: āĻā§āύ⧠āĻĄāĻŋāĻāĻžāĻāϏāĻ āĻĄā§āĻĄ āĻŦāĻž āĻĄāĻŋāϏā§āĻŦāϞ āĻāϰāĻž āύā§āĻāĨ¤
āĻĢā§āϞ: āĻā§āύ⧠āĻĄāĻŋāĻāĻžāĻāϏā§āϰ āύāĻžāĻŽ āĻāϏāϞ⧠āĻĻā§āĻāĻžāύāĻŋ āϤāĻž āϞā§āĻāĻŋā§ā§ āĻĄāĻŋāϏā§āĻŦāϞ āĻāϰ⧠āϰā§āĻā§āĻā§āĨ¤
â
Copied!
â OS Architecture (Spoof Check)
wmic os get osarchitecture
āĻāĻāĻāĻĒā§āĻ: 64-bit
āĻĒāĻžāϏ: 64-bit āĻĻā§āĻāĻžāĻŦā§āĨ¤
â
Copied!
â Motherboard Revision Version
wmic baseboard get version
āĻāĻāĻāĻĒā§āĻ: āĻŦā§āϰā§āĻĄā§āϰ āĻāĻžāϰā§āϏāύāĨ¤
â
Copied!
â BIOS Language (Tamper Check)
wmic bios get currentlanguage
āĻāĻāĻāĻĒā§āĻ: en-US / en-GB
āĻā§āĻžāϰā§āύāĻŋāĻ: āĻ
āύā§āϝ āĻā§āύ⧠āĻāĻžāώāĻž āĻĨāĻžāĻāϞ⧠āϞā§āϝāĻžāĻĒāĻāĻĒā§āϰ āĻŦāĻžā§ā§āϏ āĻŽāĻĄāĻŋāĻĢāĻžāĻ āĻāϰāĻž āĻšāϤ⧠āĻĒāĻžāϰā§āĨ¤
â
Copied!
â Windows Install Date
wmic os get installdate
āĻāĻāĻāĻĒā§āĻ: āϤāĻžāϰāĻŋāĻ āĻ āϏāĻŽā§āĨ¤ (āĻāĻŦā§ āύāϤā§āύ āĻāĻāύā§āĻĄā§āĻ āĻĻā§āĻā§āĻž āĻšā§ā§āĻā§ āϤāĻž āĻĻā§āĻāĻž āϝāĻžāĻŦā§)āĨ¤
â
Copied!
â System Manufacturer (Fake Branding)
wmic computersystem get manufacturer
āĻāĻāĻāĻĒā§āĻ: HP / Dell / Lenovo
āĻĒāĻžāϏ: āĻ
āϰāĻŋāĻāĻŋāύāĻžāϞ āĻŦā§āϰā§āϝāĻžāύā§āĻĄā§āϰ āύāĻžāĻŽāĨ¤
â
Copied!
â Virtualization Status
systeminfo | find "Virtualization"
āĻāĻāĻāĻĒā§āĻ: Enabled in Firmware: Yes
â
Copied!
â SSD Type Double Check
wmic diskdrive get model, interfacetype
āĻāĻāĻāĻĒā§āĻ: InterfaceType: SCSI / NVMe
āĻĒāĻžāϏ: āĻĢāĻžāϏā§āĻ NVMe āĻšāϞ⧠SCSI āĻĻā§āĻāĻžā§āĨ¤
āĻā§āĻžāϰā§āύāĻŋāĻ: IDE āĻŦāĻž SATA āĻĻā§āĻāĻžāϞ⧠āϏā§āĻāĻŋ āϏāĻžāϧāĻžāϰāĻŖ/āϏā§āϞ⧠āĻāϏāĻāϏāĻĄāĻŋāĨ¤
â
Copied!
â Driver Conflicts List
driverquery /v
āĻāĻāĻāĻĒā§āĻ: āĻŦāĻŋāϏā§āϤāĻžāϰāĻŋāϤ āĻĄā§āϰāĻžāĻāĻāĻžāϰ āϞāĻŋāϏā§āĻāĨ¤
â
Copied!
â Unsigned Drivers Check
sigverif
āĻāĻāĻāĻĒā§āĻ: āĻāĻāĻāĻŋ āĻĒāĻĒ-āĻāĻĒ āĻā§āϞ āĻāĻĒā§āύ āĻšāĻŦā§āĨ¤
āĻĒāĻžāϏ: āϏāĻŦ āĻĄā§āϰāĻžāĻāĻāĻžāϰ āĻā§āϰāĻŋāĻĢāĻžā§ā§āĻĄ āĻĨāĻžāĻāϞā§āĨ¤
āĻā§āĻžāϰā§āύāĻŋāĻ: Unsigned āĻĄā§āϰāĻžāĻāĻāĻžāϰ āĻĨāĻžāĻāϞ⧠āϏāĻĢāĻāĻā§ā§āϝāĻžāϰ āĻŽāĻĄāĻŋāĻĢāĻžāĻ āĻāϰāĻž āĻšāϤ⧠āĻĒāĻžāϰā§āĨ¤
â
Copied!
â Windows Error Logs (Hardware Faults)
wevtutil qe System /c:20 /f:text /q:"*[System[(Level=2)]]"
āĻāĻāĻāĻĒā§āĻ: āĻā§āϞāĻŋāύ āϞāĻāĨ¤
āĻĢā§āϞ: āĻŦāĻžāϰāĻŦāĻžāϰ "Kernel-Power" āĻāϰāϰ āĻĨāĻžāĻāϞ⧠āϞā§āϝāĻžāĻĒāĻāĻĒ āϰā§āύā§āĻĄāĻŽāϞāĻŋ āϰāĻŋāϏā§āĻāĻžāϰā§āĻ āĻŦāĻž āĻšā§āϝāĻžāĻ āĻšā§ā§ āϝāĻžā§āĨ¤
â
Copied!
â Recent BIOS Modification Date
wmic bios get releasedate
āĻāĻāĻāĻĒā§āĻ: āĻŦāĻžā§ā§āϏ āĻĢā§āϞā§āϝāĻžāĻļ āĻāϰāĻžāϰ āĻĄā§āĻāĨ¤
â
Copied!
â Power Throttling Report
powercfg /energy
āĻāĻāĻāĻĒā§āĻ: ā§Ŧā§Ļ āϏā§āĻā§āύā§āĻĄ āϏā§āĻā§āϝāĻžāύ āĻāϰ⧠āĻāĻāĻāĻŋ āĻāύāĻžāϰā§āĻāĻŋ āϰāĻŋāĻĒā§āϰā§āĻ āĻĢāĻžāĻāϞ āĻĻāĻŋāĻŦā§āĨ¤
â
Copied!
â System File Corruption Check
sfc /scannow
āĻāĻāĻāĻĒā§āĻ: No integrity violations found
āĻĒāĻžāϏ: āĻāĻāύā§āĻĄā§āĻ ā§§ā§Ļā§Ļ% āĻā§āϞāĻŋāύāĨ¤
â
Copied!
â Deep OS Corruption Check
DISM /Online /Cleanup-Image /ScanHealth
āĻāĻāĻāĻĒā§āĻ: No component store corruption
āĻĒāĻžāϏ: āĻāĻāϏ āĻšā§āϞāĻĻāĻŋ āĻāĻā§āĨ¤
â
Copied!
â Fake USB WiFi/Dongle Catch
wmic path Win32_USBHub get DeviceID, Name
āĻāĻāĻāĻĒā§āĻ: USB Hubs.
āĻĢā§āϞ: āϏāϏā§āϤāĻž USB WiFi āĻāϰ āύāĻžāĻŽ āĻĻā§āĻāĻžāϞ⧠āĻ
āϰāĻŋāĻāĻŋāύāĻžāϞ āĻŽāĻĄāĻŋāĻāϞ āύāώā§āĻ āĻŦāĻŋāϧāĻžā§ āĻā§ā§āĻžāϤāĻžāϞāĻŋ āĻĻā§āĻā§āĻž āĻšā§ā§āĻā§āĨ¤
â
Copied!
â Fake PCI Devices Catch
wmic path Win32_PnPEntity get Name, Manufacturer, DeviceID
āĻāĻāĻāĻĒā§āĻ: āĻŽāĻžāĻĻāĻžāϰāĻŦā§āϰā§āĻĄā§āϰ āϏāĻŦ āĻāĻžāύā§āĻāĻļāύ āϞāĻŋāϏā§āĻāĨ¤
â
Copied!
â Check Hidden Partitions
diskpart
āύāĻŋā§āĻŽ: āĻāĻĒā§āύ āĻšāĻā§āĻžāϰ āĻĒāϰ āϞāĻŋāĻāĻŦā§āύ: `list disk` -> `select disk 0` -> `list partition`
āĻĢā§āϞ: āĻ
āύā§āĻ āĻŦā§ āϏā§āĻĒā§āϏā§āϰ āĻāύāύā§āύ āĻšāĻŋāĻĄā§āύ āĻĒāĻžāϰā§āĻāĻŋāĻļāύ āĻĨāĻžāĻāϞ⧠āϤāĻž āĻāϰā§āĻĒā§āϰā§āĻ āϞāĻā§āϰ āĻāύā§āϝ āĻšāϤ⧠āĻĒāĻžāϰā§āĨ¤
â
Copied!