T1028 Windows Remote Management

Enterprisezurückgezogen

Windows Remote Management (WinRM) is the name of both a Windows service and a protocol that allows a user to interact with a remote system (e.g., run an executable, modify the Registry, modify services). It may be called with the <code>winrm</code> command or by any number of programs such as PowerShell.

01

Plattformen

Plattformen, für die dies gilt.

Windows
02

Taktiken

ATT&CK-Taktiken, denen diese Technik dient.

03

Quelle

Wo diese Definition veröffentlicht ist.

MITRE ATT&CK