T1028 Windows Remote Management
EnterpriserevokedWindows Remote Management (WinRM) is the name of both a Windows service and a protocol that allows a user to interact with a remote system (e.g., run an executable, modify the Registry, modify services). It may be called with the <code>winrm</code> command or by any number of programs such as PowerShell.
01
platforms
Platforms this applies to.
Windows
02
tactics
ATT&CK tactics this technique serves.
03
source
Where this definition is published.