Tracing a WMI Query to the Kernel: How Get-PhysicalDisk Reads Serial Number and UID
Tracing a WMI query to the kernel, following the full path end to end from a user-mode WMI call down to the kernel provider that answers it, and the mechanism explained clearly.