自动化接入 · API / MCP EN

技术说明 · T1028

Windows Remote Management

Windows Remote Management (WinRM) is the name of both a Windows service and a protocol that allows a user to interact with a remote system (e.g., run an executable, modify the Registry, modify services). It may be called with the <code>winrm</code> command or by any number of programs such as PowerShell.

ATT&CK T1028 platforms — 状态 有效 版本 20.1

Windows Remote Management (WinRM) is the name of both a Windows service and a protocol that allows a user to interact with a remote system (e.g., run an executable, modify the Registry, modify services). 1 It may be called with the <code>winrm</code> command or by any number of programs such as PowerShell. 2

  1. Microsoft WinRM
  2. Jacobsen 2014

使用该技术的组织

参考表中尚无组织使用记录。

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核;置信度与有效期按引用读取。