Microsoft.RPC

Description

This indicates an attempt to use the MSRPC protocol.
Microsoft Remote Procedure Call (MSRPC) is Microsoft's implementation of DCE/RPC (Distributed Computing Environment / Remote Procedure Calls). It is used to create a client-server model in Windows NT.

Affected Products

MSRPC

Impact

Unexpected network communication

Technology

Client-Server

Behavior

• Reasonable

Default Ports

• TCP/135
• TCP/445
• TCP/593
• TCP/1024-5000
• TCP/49152-65535

References

• https://msdn.microsoft.com/en-us/library/windows/desktop/aa378651(v=vs.85).aspx