to look at the process that have a name of nc.exe lisiting one line of output(brief), every 1 second. windows>wmic process where name="nc.exe" list brief /every:1 invoke nc using wmic windows>wmic process call create "c:\tools\nc.exe -l -p 4444 -e cmd.exe" delete/kill netcat process windows>wmic process where name="nc.exe" delete