WMIC couldn't do this natively without ugly scripts. Register-CimIndicationEvent lets you watch for new processes or USB drives.
Key capabilities:
wmic service where "name='spooler'" call startservice wmic help new
wmic share call create "", "Description", "MaximumAllowed", "ShareName", "", "C:\Path\To\Folder", 0 Create a New Scheduled Job: wmic job call create "Command", "StartTime", "EveryDay" ScienceDirect.com Important Note on Deprecation Microsoft has officially removed WMIC by default WMIC couldn't do this natively without ugly scripts