commonfields: id: Windows Remote Management version: -1 name: Windows Remote Management display: Windows Remote Management (Beta) category: Endpoint provider: Microsoft description: Uses the Python pywinrm library and commands to execute either a process or using Powershell scripts. configuration: - display: Credentials name: credentials type: 9 required: true - display: Default Host name: default_host type: 0 required: true - display: Authentication Type name: auth_type defaultvalue: ntlm type: 15 required: true options: - ntlm - display: Realm name: realm type: 0 additionalinfo: Default realm to use for Kerberos based authentication required: false - display: Decode codec (default is utf_8) name: decode defaultvalue: utf_8 type: 15 options: - ascii - big5 - big5hkscs - cp037 - cp424 - cp437 - cp500 - cp737 - cp775 - cp850 - cp852 - cp855 - cp856 - cp857 - cp860 - cp861 - cp862 - cp863 - cp864 - cp865 - cp866 - cp869 - cp874 - cp875 - cp932 - cp949 - cp950 - cp1006 - cp1026 - cp1140 - cp1250 - cp1251 - cp1252 - cp1253 - cp1254 - cp1255 - cp1256 - cp1257 - cp1258 - euc_jp - euc_jis_2004 - euc_jisx0213 - euc_kr - gb2312 - gbk - gb18030 - hz - iso2022_jp - iso2022_jp_1 - iso2022_jp_2 - iso2022_jp_2004 - iso2022_jp_3 - iso2022_jp_ext - iso2022_kr - latin_1 - iso8859_2 - iso8859_3 - iso8859_4 - iso8859_5 - iso8859_6 - iso8859_7 - iso8859_8 - iso8859_9 - iso8859_10 - iso8859_13 - iso8859_14 - iso8859_15 - johab - koi8_r - koi8_u - mac_cyrillic - mac_greek - mac_iceland - mac_latin2 - mac_roman - mac_turkish - ptcp154 - shift_jis - shift_jis_2004 - shift_jisx0213 - utf_16 - utf_16_be - utf_16_le - utf_7 - utf_8 additionalinfo: Decode codec to use when decoding command outputs (defaults to 'utf_8') required: false script: script: '' type: python commands: - name: winrm-run-process arguments: - name: hostname description: The hostname to run the command on. This will override the default hostname specified in the instance. - name: command required: true description: Command to execute. - name: arguments description: Comma separate list of arguments. - name: decode auto: PREDEFINED predefined: - ascii - big5 - big5hkscs - cp037 - cp424 - cp437 - cp500 - cp737 - cp775 - cp850 - cp852 - cp855 - cp856 - cp857 - cp860 - cp861 - cp862 - cp863 - cp864 - cp865 - cp866 - cp869 - cp874 - cp875 - cp932 - cp949 - cp950 - cp1006 - cp1026 - cp1140 - cp1250 - cp1251 - cp1252 - cp1253 - cp1254 - cp1255 - cp1256 - cp1257 - cp1258 - euc_jp - euc_jis_2004 - euc_jisx0213 - euc_kr - gb2312 - gbk - gb18030 - hz - iso2022_jp - iso2022_jp_1 - iso2022_jp_2 - iso2022_jp_2004 - iso2022_jp_3 - iso2022_jp_ext - iso2022_kr - latin_1 - iso8859_2 - iso8859_3 - iso8859_4 - iso8859_5 - iso8859_6 - iso8859_7 - iso8859_8 - iso8859_9 - iso8859_10 - iso8859_13 - iso8859_14 - iso8859_15 - johab - koi8_r - koi8_u - mac_cyrillic - mac_greek - mac_iceland - mac_latin2 - mac_roman - mac_turkish - ptcp154 - shift_jis - shift_jis_2004 - shift_jisx0213 - utf_16 - utf_16_be - utf_16_le - utf_7 - utf_8 description: Decode codec to use when decoding command outputs (overrides value set in the instance). outputs: - contextPath: WinRM.Process description: Process object of the WinRM command. - contextPath: WinRM.Process.Output description: STDOUT of the WinRM command. - contextPath: WinRM.Process.Error description: STDERR of the WinRM command. - contextPath: WinRM.Process.Status description: Status code of the WInRM command. description: Executes a command on the host. execution: true - name: winrm-run-powershell arguments: - name: hostname description: The hostname to run the command on. This will override the default hostname specified in the instance. - name: entryID description: The entry ID of the powershell script to run (overrides scriptname and script). - name: script description: The powershell script to execute (requires code, not a file input). - name: scriptname description: Name of the script (optional). - name: decode auto: PREDEFINED predefined: - ascii - big5 - big5hkscs - cp037 - cp424 - cp437 - cp500 - cp737 - cp775 - cp850 - cp852 - cp855 - cp856 - cp857 - cp860 - cp861 - cp862 - cp863 - cp864 - cp865 - cp866 - cp869 - cp874 - cp875 - cp932 - cp949 - cp950 - cp1006 - cp1026 - cp1140 - cp1250 - cp1251 - cp1252 - cp1253 - cp1254 - cp1255 - cp1256 - cp1257 - cp1258 - euc_jp - euc_jis_2004 - euc_jisx0213 - euc_kr - gb2312 - gbk - gb18030 - hz - iso2022_jp - iso2022_jp_1 - iso2022_jp_2 - iso2022_jp_2004 - iso2022_jp_3 - iso2022_jp_ext - iso2022_kr - latin_1 - iso8859_2 - iso8859_3 - iso8859_4 - iso8859_5 - iso8859_6 - iso8859_7 - iso8859_8 - iso8859_9 - iso8859_10 - iso8859_13 - iso8859_14 - iso8859_15 - johab - koi8_r - koi8_u - mac_cyrillic - mac_greek - mac_iceland - mac_latin2 - mac_roman - mac_turkish - ptcp154 - shift_jis - shift_jis_2004 - shift_jisx0213 - utf_16 - utf_16_be - utf_16_le - utf_7 - utf_8 description: Decode codec to use when decoding command outputs (overrides value set in the instance). outputs: - contextPath: WinRM.Powershell.Output description: STDOUT of the WinRM command. - contextPath: WinRM.Powershell.Error description: STDERR of the WinRM command. - contextPath: WinRM.Powershell.Status description: Status code of the WInRM command. description: Executes a Powershell script on the endpoint. dockerimage: demisto/auth-utils:1.0.0.3562326 subtype: python3 fromversion: 5.0.0 tests: - No tests (auto formatted) beta: true