From 96f100407d6ab0c14236791e63d44d1fab0e934a Mon Sep 17 00:00:00 2001
From: qtKite <kite@uwu.icu>
Date: Thu, 10 Jun 2021 03:59:48 +1000
Subject: [PATCH] Update README.md

---
 README.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/README.md b/README.md
index ac3bed4..b4bf089 100644
--- a/README.md
+++ b/README.md
@@ -373,4 +373,12 @@ I first wanted to see how powershell called the command, so i looked through the
 Get-Command Set-MpPreference | fl
 ```
 
+If we wanted to read the MSFT_MpPreference class, it is documented here:
+https://docs.microsoft.com/en-us/previous-versions/windows/desktop/legacy/dn455323(v=vs.85)#requirements
+We can access via powershell like so:
+```
+Get-WmiObject -ClassName MSFT_MpPreference -Namespace root/microsoft/windows/defender
+```
+
+