Usage of administration protocols in the domain

In this section, we will cover various administration protocols that are usually used by IT staff inside the domain for day-to-day support activities. We will discuss PowerShell features such as PSRemoting and Just Enough Administration (JEA). The Remote Desktop Protocol (RDP) is one of the most common protocols used by administration as well. We will briefly go through other protocols that can be used for lateral movement such as WMI, SMB, DCOM, and PSExec from Impacket.

PSRemoting and JEA

PSRemoting allows you to connect to multiple computers and run the commands on them. Another option is that you can have a one-to-one interactive shell on the target machine. For simplicity, you can think of it as SSH, but for Windows to run PowerShell commands. In a nutshell, the client tries to connect to a tiny web server running on a destination server called the WinRM listener. HTTP or HTTPS protocols can be used to provide transport for...