Windows.Powershell
Description
This indicates an attempt to execute a remote command via Windows PowerShell.PowerShell is a task automation and configuration management framework from Microsoft. It consists of a command-line shell and scripting language built on the .NET Framework. PowerShell provides access to COM and WMI which enables administrators to perform tasks with higher privileges on local and remote Windows systems.
Affected Products
Microsoft Windows
Impact
Firewall policy avoidance
Technology
Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device
Behavior
- Reasonable
Default Ports
- TCP/5985-5986