A great article on port and network configuration for WS-Management and PowerShell remoting, and the source for these commands that you can use to change them, is here: https://blogs.msdn.microsoft.com/wmi/2009/07/22/new-default-ports-for-ws-management-and-powershell-remoting/

← @kwm Twitter archive

Keith

@kwm

Looking at network-based detection of PowerShell remoting. Default ports are 5985 and 5986, but this can be changed via WinRM, Group Policy, or PowerShell (and surely other methods, too).

If you're not looking at Event Logs and/or process bindings for network connections . . .

3/9/2018, 5:38:14 PM

Favs: 11

Retweets: 3

link

Keith

@kwm

A great article on port and network configuration for WS-Management and PowerShell remoting, and the source for these commands that you can use to change them, is here: https://blogs.msdn.microsoft.com/wmi/2009/07/22/new-default-ports-for-ws-management-and-powershell-remoting/

3/9/2018, 5:43:49 PM

Favs: 2

Retweets: 3

link