Integration profile

Discovery provider · Windows WinRM discovery

Discover Windows hosts through WinRM and PowerShell patterns.

Demo baseline · November 13, 2026

Download PDF

Prerequisites

TCP access from a collector to WinRM
Windows discovery service account
Kerberos, certificate, or HTTPS transport

Configuration steps

Select collector and target ranges
Choose transport and port
Reference the Windows credential secret
Test WinRM, PowerShell, and WMI

Provider fields

Field	Type	Requirement and options
Target CIDRs / hostnames `targetRanges`	textarea	Required
Collector / MID server `collector`	text	Required
WinRM port `port`	number	Required
Discovery username `username`	text	Required
Transport `transport`	select	Required `kerberos`, `ntlm_https`, `certificate`, `basic_https`
Credential secret alias `passwordSecretAlias`	text	Required
Validate HTTPS certificate `validateCertificate`	boolean	Optional
Use JIT administrative access `useJitAdmin`	boolean	Optional

Verify and troubleshoot

Test with the narrowest supported non-production scope. Confirm that the connection test reaches the expected provider and that the preview or receipt matches the intended scope. Check identity, credential references, network access and provider permissions before retrying. Record the failure stage and redact sensitive payloads when escalating.