WinRM

Operation Soft Cell

Operation Soft Cell is a series of attack campaigns publicly reported to have been active as early as 2012. These campaigns have targeted telecommunication providers…

Read more

APT32 / OceanLotus campaigns 2019

EV-0054, also known as APT32 or OceanLotus, has been running stealthy operations characterized by novel delivery mechanisms, unique first-level installation, persistence, backdoor implants, and command-and-control…

Read more

Disable 'Allow Basic authentication' for WinRM Client

Check whether the Windows Remote Management (WinRM) client uses Basic authentication. Option 1 - Set the following Group Policy: Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Remote Management (WinRM)\WinRM…

Read more