My way to WMI troubleshooting on a Citrix environment – part 1
While working at a customer environment, I found some wmiprvse processes consuming a lot of CPU time. This customer is running most of its workload on large bare metal servers so they are running more users than the normal average for a single OS instance (between 80 and 150). WMI is quite complex to troubleshoot as it’s a “black box” called by almost all part of the environment (user or system processes, monitoring tooling, inventory software…). After few hours (days? ) spent I had to acknowledge that I need help from “someone who knows better”. When thinking about this kind of knowledge, my first tough is let’s give a call to my fellow CTP Remko (https://www.linkedin.com/in/remkoweijnen)! On top of being a good friend, he is the guy I can listen for hours talking about reverse engineering or API hooking! …
