EventQuery 中的 ISA 是什么？

Question

假设我有一个代码：

public void StartThreadWatch()
{
    EventQuery query = new EventQuery
    ("SELECT * FROM _InstanceCreationEvent WITHIN 1 " +
     "WHERE TargetInstance ISA 'Win32_Process'";
     ManagementEventWatcher watcher =
        new ManagementEventWatch(query);
      watch.EventArrived += EventArrived;
      watch.Start();
 }

我不知道查询中的'ISA'是什么...

Answer 1

ISA 是一种 operator of the WQL 语言，用于查询指定 WMI class 的子 classes。

有关更多信息，请查看这些 msdn 链接

• ISA Operator for Data Queries
• ISA Operator for Event Queries
• ISA Operator for Schema Queries