• port: 5985
  • remote powershell. can get remote shell if creds found