Cyber Operations: Building, Defending, and Attacking Modern Computer Networks

© Mike O'Leary 2019

Mike O'LearyCyber Operationshttps://doi.org/10.1007/978-1-4842-4294-0_7

7. Remote Windows Management

Mike O’Leary¹ 

(1)

Towson, MD, USA

 

Introduction

Windows allows users on one system to access and manage other systems through a range of mechanisms. Many common tools and commands allow the user to specify the target as a remote system. Some of these commands run over Server Message Block (SMB), other commands use Remote Procedure Calls (RPC), while another option is Windows Remote Management (WinRM). These require different services running on the target and different firewall settings for proper communication.

Windows Management Instrumentation (WMI) provides an interface to many of the operating system’s core components. Although ...