CmdID / Techniques / T1021
T1021.006 Remote Services: Windows Remote Management
Adversaries may use Valid Accounts to interact with remote systems using Windows Remote Management (WinRM). MITRE ATT&CK
4 Sigma rules T1021.006 on attack.mitre.org
Part of
T1021Remote Services