Windows.Powershell

description-logo Description

This indicates an attempt to execute a remote command via Windows PowerShell.
PowerShell is a task automation and configuration management framework from Microsoft. It consists of a command-line shell and scripting language built on the .NET Framework. PowerShell provides access to COM and WMI which enables administrators to perform tasks with higher privileges on local and remote Windows systems.

affected-products-logoAffected Products

Microsoft Windows

Impact logoImpact

Firewall policy avoidance

Technology

Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device

Behavior

  • Reasonable

Default Ports

  • TCP/5985-5986