> For the complete documentation index, see [llms.txt](https://www.iblue.team/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.iblue.team/general-notes-1/winrm-remoteps.md).

# WinRM/RemotePS

```
PS C:\WINDOWS\system32> $b = New-PSSession -ComputerName REMOTEIP -Credential DOMAIN.local\administrator
PS C:\WINDOWS\system32> Copy-Item -FromSession $b C:\Users\Administrator\Downloads\CyLR\PACKAGE.ZIP -Destination C:\LOCALHOST\PACKAGE.ZIP
```

Enabled Remote PS, executed CyLR, copied it back to source machine for analysis.