WinRM

WinRM sensor uses the Windows Remote Management (WinRM) functionality to remotely monitor Windows devices. You can find more information in the official documentation.

Parameters

Parameter Description

Parameter	Description
URL	URL or IP address of the machine.
Subtype	Type of the script that will be executed. The system has the following types – `Program/script in the file system`, `Script from repository` and `Script with text`.
Script	Script that will be executed on the machine. Depends on the subtype. It is a text input field for the `Program/script in the file system` subtype or a code input field for the `Script with text` subtype.
Authentication	Host authentication type. Selector has the following parameters – `No` and `NTLM`.
Username	Username used for NTLM authentication.
Password	Password used for NTLM authentication.

URL

URL or IP address of the machine.

Subtype

Type of the script that will be executed. The system has the following types – Program/script in the file system, Script from repository and Script with text.

Script

Script that will be executed on the machine.

Depends on the subtype. It is a text input field for the Program/script in the file system subtype or a code input field for the Script with text subtype.

Authentication

Host authentication type. Selector has the following parameters – No and NTLM.

Username

Username used for NTLM authentication.

Password

Password used for NTLM authentication.

Result

If the check was successful, the Data section will contain the information listed in the table below.

Field Description

Field	Description
exitCode	Script’s exit code.
stdout	Script’s output in the `stdout` stream.
stderr	Script’s error output in the `stderr` stream.

exitCode

Script’s exit code.

stdout

Script’s output in the stdout stream.

stderr

Script’s error output in the stderr stream.