WMI.DCERPC

Description

This indicates detection of a remote WMI connection over DCE/RPC.
Windows Management Instrumentation (WMI) is a suite of tools for managing data and operations on Windows-based operating systems. WMI is the Microsoft implementation of the Web-based Enterprise Management (WBEM) standard. Users can write WMI scripts to automate administrative tasks on remote computers.

Affected Products

Windows-based operating systems

Impact

Unexpected network communication

Technology

Network-Protocol

Behavior

• Other

Default Ports

• TCP/135