We're updating the issue view to help you get more done. 

Windows Remote Management

Description

Windows Remote Management (WinRM) is the name of both a Windows service and a protocol that allows a user to interact with a remote system (e.g., run an executable, modify the Registry, modify services). (Citation: Microsoft WinRM) It may be called with the <code>winrm</code> command or by any number of programs such as PowerShell. (Citation: Jacobsen 2014)

id

T1028

tactic

execution

datasources

Process command-line parameters
Process monitoring
Authentication logs
File monitoring
Netflow/Enclave netflow

maturity

Not Tracked

Assignee

Unassigned
Configure