WMI Event Subscription Persistence in C#

Sample framework code for interfacing with WMI using native COM API

WMIPersistenceDetection monitors Windows Management Instrumentation (WMI) for persistence mechanisms including event subscriptions and permanent event consumers.

Read-only enumeration of permanent WMI event subscriptions in root\subscription — filters, consumers, bindings, and orphan detection — with timestamped JSON export for baseline diffing. Part of the Sojourner Protection Platform (SPP) module suite.

No description available