pax_global_header00006660000000000000000000000064130540626200014510gustar00rootroot0000000000000052 comment=5b029bbcfd42da9ecd49774b210bc8498bebb749 txwinrm-1.2.7/000077500000000000000000000000001305406262000132275ustar00rootroot00000000000000txwinrm-1.2.7/.gitignore000066400000000000000000000005621305406262000152220ustar00rootroot00000000000000*.py[cod] # C extensions *.so # Packages *.egg *.egg-info dist build eggs parts bin var sdist develop-eggs .installed.cfg lib lib64 # Installer logs pip-log.txt # Unit test / coverage reports .coverage .tox nosetests.xml # Translations *.mo # Mr Developer .mr.developer.cfg .project .pydevproject # generated by distutils MANIFEST cyclic_complexity _trial_temp* txwinrm-1.2.7/LICENSE000066400000000000000000000025451305406262000142420ustar00rootroot00000000000000txwinrm - Asynchronous Python WinRM client Copyright (C) Zenoss, Inc. 2013, all rights reserved. This program is licensed to you in one of two ways: If you are using this program in connection with the commercial version of any Zenoss software, your use is governed by terms of the license agreement you agreed to when you purchased your license to the commercial Zenoss software. If you are using this program in connection with the open source version of Zenoss software (sometimes referred to as Zenoss Core) which is licensed under the terms of the GNU General Public License version 2 (or later at your option) (“GPL”) then this program is licensed to you under the GPL as well, and the following applies: This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 (or later at your option) as published by the Free Software Foundation. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License v2 along with this program; if not, write to the Free Software Foundation, Inc. 51 Franklin Street, Fifth Floor Boston, MA 02110-1301, USA txwinrm-1.2.7/MANIFEST.in000077500000000000000000000001251305406262000147660ustar00rootroot00000000000000include README.rst include LICENSE include gpl-2.0.txt include txwinrm/request/*.xml txwinrm-1.2.7/README.rst000066400000000000000000000410661305406262000147250ustar00rootroot00000000000000txwinrm: Async Python WinRM Client ================================== At Zenoss we are working on a project to improve the reliability, performance and features of native Windows monitoring. The core of this project is this Python library for asynchronously managing Windows using the WinRM and WinRS services. This library will then be used by Zenoss to do automatic discovery and monitoring the way Zenoss users are used to with some new possibilities. Right now we're trying to get as much real world experience using the library as possible to prove out the reliability and performance improvements we're hoping to achieve. If you have access to Windows servers, you can help! This tool no longer stands alone. You must install kerberos.so from the Windows ZenPack, https://github.com/zenoss/ZenPacks.zenoss.Microsoft.Windows/tree/develop/ZenPacks/zenoss/Microsoft/Windows/lib. The source for this version of pykerberos can be found here: https://github.com/zenoss/ZenPacks.zenoss.Microsoft.Windows/tree/develop/src/pykerberos See the zenoss-windows forum for updates to the project, and leave your feedback there. http://community.zenoss.org/community/forums/zenoss-windows Installation ------------ Ubuntu Server 12.04.1 LTS (Python 2.7.3) :: sudo apt-get update sudo apt-get -y install gcc python-dev libkrb5-dev krb5-user python-setuptools # if prompted for your kerberos realm, leave it blank and choose OK sudo easy_install txwinrm # if you want to use a Windows domain sudo genkrb5conf # now you can run the txwinrm commands (winrm, winrs, typeperf, and wecutil) Centos 6.3 x86_64 (Python 2.6.6) :: # as root yum -y install gcc python-devel krb5-devel krb5-workstation python-setuptools easy_install txwinrm # if you want to use a Windows domain genkrb5conf # now you can run the txwinrm commands (winrm, winrs, typeperf, and wecutil) as a normal user Zenoss Core or Resource Manager 4.2.x installed on CentOS 6 (Zenoss Python 2.7) :: # as root yum -y install gcc krb5-devel krb5-workstation # as the zenoss user easy_install txwinrm # as root (if you want to use a Windows domain) genkrb5conf # now you can run the txwinrm commands (winrm, winrs, typeperf, and wecutil) as the zenoss user Current Feature Support ----------------------- - HTTP - HTTPS - Basic authentication - WQL queries - WinRS - typeperf - Subscribe to the Windows Event Log - Kerberos authentication (domain accounts) - Single session clients - WMI Associators queries Future Feature Support ---------------------- - NTLM authentication (local accounts) - Kerberos keytab support Configuring the Target Windows Machines --------------------------------------- You can enable the WinRM service on Windows Server 2003, 2008, 2012, and 2016. Run Command Prompt as Administrator and execute the following commands for basic authentication. :: winrm quickconfig winrm s winrm/config/service '@{AllowUnencrypted="true";MaxConcurrentOperationsPerUser="4294967295"}' winrm s winrm/config/service/auth '@{Basic="true"}' winrm s winrm/config/winrs '@{MaxShellsPerUser="2147483647"}' If using domain authentication, run the following commands. :: winrm quickconfig winrm s winrm/config/service '@{MaxConcurrentOperationsPerUser="4294967295"}' winrm s winrm/config/service/auth '@{Kerberos="true"}' winrm s winrm/config/winrs '@{MaxShellsPerUser="2147483647"}' WQL Queries ----------- You can pass a single host a query via the command line... :: $ winrm -r host -u user -p password -f "select * from Win32_NetworkAdapter" Another option is to create an ini-style config file and hit multiple targets with multiple queries. Example config is at `examples/config.ini `_ :: $ winrm -c path/to/config.ini This will send WinRM enumerate requests to the hosts listed in config.ini. It will send a request for each WQL query listed in that file. The output will look like :: ==> = ... ---- (indicates start of next item) = ... ... Here is an example... :: cupertino ==> Select name,caption,pathName,serviceType,startMode,startName,state From Win32_Service Caption = Application Experience Name = AeLookupSvc PathName = C:\Windows\system32\svchost.exe -k netsvcs ServiceType = Share Process StartMode = Manual StartName = localSystem State = Stopped ---- Caption = Application Layer Gateway Service Name = ALG ... A summary of the number of failures if any and number of XML elements processed appears at the end. The summary and any errors are written to stderr, so redirect stdin to /dev/null if you want terse output. :: $ winrm -c path/to/config.ini >/dev/null Summary: Connected to 3 of 3 hosts Processed 13975 elements Failed to process 0 responses Peak virtual memory useage: 529060 kB Remote CPU utilization: campbell 0.00% of CPU time used by WmiPrvSE process with pid 1544 4.00% of CPU time used by WmiPrvSE#1 process with pid 1684 4.00% of CPU time used by WmiPrvSE#2 process with pid 3048 cupertino 0.00% of CPU time used by WmiPrvSE process with pid 1608 3.12% of CPU time used by WmiPrvSE#1 process with pid 1764 9.38% of CPU time used by WmiPrvSE#2 process with pid 2608 gilroy 1.08% of CPU time used by WmiPrvSE process with pid 1428 5.38% of CPU time used by WmiPrvSE#1 process with pid 1760 4.30% of CPU time used by WmiPrvSE#2 process with pid 1268 The '-a' option specifies the authentication method. Currently supported values are 'basic' and 'kerberos'. 'basic' is the default. The '-d' option increases logging, printing out the XML for all requests and responses, along with the HTTP status code. The '-e' option specifies which service principal to use on the Windows host. Valid values are 'http', 'https', and 'wsman'. :: usage: winrm.py [-h] [--debug] [--config CONFIG] [--remote REMOTE] [--authentication {basic,kerberos}] [--username USERNAME] [--dcip DCIP] [--keytab KEYTAB] [--password PASSWORD] [--ipaddress IPADDRESS] [--service SERVICE] [--includedir INCLUDEDIR] [--filter FILTER] optional arguments: -h, --help show this help message and exit --debug, -d --config CONFIG, -c CONFIG --remote REMOTE, -r REMOTE hostname --authentication {basic,kerberos}, -a {basic,kerberos} --username USERNAME, -u USERNAME --dcip DCIP, -i DCIP address of kdc --keytab KEYTAB, -k KEYTAB --password PASSWORD, -p PASSWORD --ipaddress IPADDRESS, -s IPADDRESS --service SERVICE, -e SERVICE http/https/wsman --includedir INCLUDEDIR valid includedir --filter FILTER, -f FILTER WinRS ----- The winrs program has four modes of operation: - interactive (default): Execute many commands in an interactive command prompt on the remote host - single: Execute a single command and return its output - long: Execute a single long-running command like 'typeperf -si 1' and check the output periodically - batch: Opens a command prompt on the remote system and executes a list of commands (actually right now it executes one command twice as a proof-of-concept) An example of interactive mode :: $ winrs interactive -u Administrator -r oakland Microsoft Windows [Version 6.2.9200] (c) 2012 Microsoft Corporation. All rights reserved. C:\Users\Default>dir Volume in drive C has no label. Volume Serial Number is 5E71-6BA3 Directory of C:\Users\Default 02/22/2013 03:42 AM Contacts 02/22/2013 03:42 AM Desktop 02/22/2013 03:42 AM Documents 02/22/2013 03:42 AM Downloads 02/22/2013 03:42 AM Favorites 02/22/2013 03:42 AM Links 02/22/2013 03:42 AM Music 02/22/2013 03:42 AM Pictures 02/22/2013 03:42 AM Saved Games 02/22/2013 03:42 AM Searches 02/22/2013 03:42 AM Videos 0 File(s) 0 bytes 11 Dir(s) 7,905,038,336 bytes free C:\Users\Default>exit An example of single mode :: $ winrs single -u Administrator -x 'typeperf "\Memory\Pages/sec" "\PhysicalDisk(_Total)\Avg. Disk Queue Length" "\Processor(_Total)\% Processor Time" -sc 1' -r oakland {'exit_code': 0, 'stderr': [], 'stdout': ['"(PDH-CSV 4.0)","\\\\AMAZONA-SDFU7B1\\Memory\\Pages/sec","\\\\AMAZONA-SDFU7B1\\PhysicalDisk(_Total)\\Avg. Disk Queue Length","\\\\AMAZONA-SDFU7B1\\Processor(_Total)\\% Processor Time"', '"04/19/2013 21:43:48.823","0.000000","0.000000","0.005660"', 'Exiting, please wait...', 'The command completed successfully.']} An example of long mode :: $ winrs long -u Administrator -x 'typeperf "\Memory\Pages/sec" "\PhysicalDisk(_Total)\Avg. Disk Queue Length" "\Processor(_Total)\% Processor Time" -si 1' -r oakland "(PDH-CSV 4.0)","\\AMAZONA-SDFU7B1\Memory\Pages/sec","\\AMAZONA-SDFU7B1\PhysicalDisk(_Total)\Avg. Disk Queue Length","\\AMAZONA-SDFU7B1\Processor(_Total)\% Processor Time" "04/19/2013 21:43:10.603","0.000000","0.000000","18.462005" "04/19/2013 21:43:11.617","0.000000","0.000000","0.000464" "04/19/2013 21:43:12.631","0.000000","0.000000","1.538423" "04/19/2013 21:43:13.645","0.000000","0.000000","0.000197" An example of batch :: $ winrs batch -u Administrator -x 'typeperf "\Memory\Pages/sec" "\PhysicalDisk(_Total)\Avg. Disk Queue Length" "\Processor(_Total)\% Processor Time" -sc 1' -r oakland Creating shell on oakland. Sending to oakland: typeperf "\Memory\Pages/sec" "\PhysicalDisk(_Total)\Avg. Disk Queue Length" "\Processor(_Total)\% Processor Time" -sc 1 Received from oakland: "(PDH-CSV 4.0)","\\AMAZONA-SDFU7B1\Memory\Pages/sec","\\AMAZONA-SDFU7B1\PhysicalDisk(_Total)\Avg. Disk Queue Length","\\AMAZONA-SDFU7B1\Processor(_Total)\% Processor Time" "04/19/2013 21:43:39.198","0.000000","0.000000","0.000483" Exiting, please wait... The command completed successfully. Sending to oakland: typeperf "\Memory\Pages/sec" "\PhysicalDisk(_Total)\Avg. Disk Queue Length" "\Processor(_Total)\% Processor Time" -sc 1 Received from oakland: "(PDH-CSV 4.0)","\\AMAZONA-SDFU7B1\Memory\Pages/sec","\\AMAZONA-SDFU7B1\PhysicalDisk(_Total)\Avg. Disk Queue Length","\\AMAZONA-SDFU7B1\Processor(_Total)\% Processor Time" "04/19/2013 21:43:41.054","0.000000","0.000000","0.000700" Exiting, please wait... The command completed successfully. Deleted shell on oakland. Exit code of shell on oakland: 0 Usage :: usage: winrs.py [-h] [--debug] [--config CONFIG] [--remote REMOTE] [--authentication {basic,kerberos}] [--username USERNAME] [--dcip DCIP] [--keytab KEYTAB] [--password PASSWORD] [--ipaddress IPADDRESS] [--service SERVICE] [--includedir INCLUDEDIR] [--command COMMAND] [{interactive,single,batch,long,multiple}] positional arguments: {interactive,single,batch,long,multiple} optional arguments: -h, --help show this help message and exit --debug, -d --config CONFIG, -c CONFIG --remote REMOTE, -r REMOTE hostname --authentication {basic,kerberos}, -a {basic,kerberos} --username USERNAME, -u USERNAME --dcip DCIP, -i DCIP address of kdc --keytab KEYTAB, -k KEYTAB --password PASSWORD, -p PASSWORD --ipaddress IPADDRESS, -s IPADDRESS --service SERVICE, -e SERVICE http/https/wsman --includedir INCLUDEDIR valid includedir --command COMMAND, -x COMMAND Typeperf -------- txwinrm's typeperf command allows you to run a remote typeperf command, check the output periodically, parse it, and print it to stdout. It support the -si option and multiple counters. Here is an example: :: $ typeperf -r gilroy -u Administrator '\Processor(_Total)\% Processor Time' '\memory\Available Bytes' '\paging file(_Total)\% Usage' \memory\Available Bytes 00:54:27: 193130496.0 \paging file(_Total)\% Usage 00:54:27: 0.012207 \Processor(_Total)\% Processor Time 00:54:27: 0.004487 \memory\Available Bytes 00:54:28: 193216512.0 00:54:29: 193982464.0 \paging file(_Total)\% Usage 00:54:28: 0.012207 00:54:29: 0.012207 \Processor(_Total)\% Processor Time 00:54:28: 1.542879 00:54:29: 0.004487 \memory\Available Bytes 00:54:30: 193933312.0 00:54:31: 193941504.0 \paging file(_Total)\% Usage 00:54:30: 0.012207 Subscribing to the Windows Event Log ------------------------------------ The following command shows an example of subscribing to the Windows event log: :: $ wecutil -r saratoga -u Administrator Pull #1 Event(system=System(provider='Microsoft-Windows-EventForwarder', event_id=111, event_id_qualifiers=None, level=None, task=None, keywords=None, time_created=datetime.datetime(2013, 5, 8, 20, 29, 31, 132000), event_record_id=None, channel=None, computer='saratoga.solutions.loc', user_id=None), data=None, rendering_info=None) Pull #2 You can run wecutil against a matrix of hosts and event queries by using a config file. :: $ wecutil -c examples/config.ini milpitas System/'*' pull #1 of 2 milpitas Application/'*' pull #1 of 2 gilroy System/'*' pull #1 of 2 ... milpitas System/'*' Event(system=System(provider='Microsoft-Windows-... ... milpitas Application/'*' pull #2 of 2 ... Summary: Connected to 4 of 4 hosts Processed 12 events Peak virtual memory useage: 361060 kB Remote CPU utilization: saratoga 0.15% of CPU time used by WmiPrvSE process with pid 1640 0.96% of CPU time used by WmiPrvSE#1 process with pid 2000 0.00% of CPU time used by WmiApSrv process with pid 604 0.07% of CPU time used by WmiPrvSE#2 process with pid 1604 gilroy 0.00% of CPU time used by WmiPrvSE process with pid 1384 0.00% of CPU time used by WmiPrvSE#1 process with pid 1684 0.00% of CPU time used by WmiApSrv process with pid 1924 0.15% of CPU time used by WmiPrvSE#2 process with pid 1348 milpitas 0.36% of CPU time used by wmiprvse process with pid 1924 1.01% of CPU time used by wmiprvse process with pid 816 berkeley 0.00% of CPU time used by WmiPrvSE process with pid 1624 0.00% of CPU time used by WmiPrvSE#1 process with pid 1744 0.00% of CPU time used by WmiApSrv process with pid 1620 0.07% of CPU time used by WmiPrvSE#2 process with pid 1280 Feedback -------- To provide feedback on txwinrm start a discussion on the zenoss-windows forum on community.zenoss.org: http://community.zenoss.org/community/forums/zenoss-windows Zenoss uses JIRA to track bugs. Create an account and file a bug, or browse reported bugs: http://jira.zenoss.com/jira/secure/Dashboard.jspa Unit Test Coverage ------------------ As of Apr 16, 2013... :: $ txwinrm/test/cover ........................ ---------------------------------------------------------------------- Ran 24 tests in 7.910s OK Name Stmts Miss Cover --------------------------------------- txwinrm/__init__ 0 0 100% txwinrm/constants 18 0 100% txwinrm/enumerate 259 46 82% txwinrm/shell 114 34 70% txwinrm/util 89 24 73% --------------------------------------- TOTAL 480 104 78% Develop ------- Run txwinrm/test/precommit before merging to master. This requires that you... :: easy_install flake8 easy_install coverage git clone https://github.com/dgladkov/cyclic_complexity Changes ------- 1.2.2 * Add support for multiple kdcs to be defined 1.1.27 * Add support for running commands/enumerations in a single session txwinrm-1.2.7/docs/000077500000000000000000000000001305406262000141575ustar00rootroot00000000000000txwinrm-1.2.7/docs/ms_tools.md000077500000000000000000000004111305406262000163370ustar00rootroot00000000000000Overview of Microsoft WinRM Tools ================================= winrm ----- Ping. Is winrm service up? No authentication. winrm id -r:hostname -a:none winrs ----- *TODO: put info about winrs here* wecutil ------- *TODO: put info about wecutil here* txwinrm-1.2.7/examples/000077500000000000000000000000001305406262000150455ustar00rootroot00000000000000txwinrm-1.2.7/examples/config.ini000077500000000000000000000043561305406262000170260ustar00rootroot00000000000000[credentials] default.authentication = basic default.username = Administrator domain.authentication = kerberos domain.username = bedwards@solutions.loc [remotes] milpitas = default gilroy = default ;oakland = default ; fremont = domain berkeley = domain saratoga = domain ; https is not working yet ; https://berkeley.solutions.loc:5986 = default [wqls] ; ZenPacks.zenoss.WindowsMonitor modeler plugins ; FileSystemMap select * from Win32_logicaldisk select * from Win32_Volume ; WindowsDeviceMap select * from Win32_OperatingSystem select * from Win32_Service select * from Win32_SystemEnclosure select * from Win32_ComputerSystem ; MemoryMap Select TotalVisibleMemorySize,TotalVirtualMemorySize From Win32_OperatingSystem ; WinServiceMap Select name,caption,pathName,serviceType,startMode,startName,state From Win32_Service ; IpRouteMap Select destination,interfaceindex,mask,metric1,metric2,metric3,metric4,metric5,nexthop,protocol,type From Win32_IP4RouteTable ; IpInterfaceMap Select * From Win32_NetworkAdapterConfiguration Select * From Win32_PerfRawData_Tcpip_NetworkInterface ; CpuMap Select deviceid,InstalledSize From Win32_CacheMemory Select deviceid,description,manufacturer,socketdesignation,currentclockspeed,extclock,currentvoltage,l2cachesize,version From Win32_Processor ; ProcessMap Select * From Win32_Process ; zenwin SELECT Name, State, StartMode FROM Win32_Service ; Performance Data ; \Disk Read Bytes/sec select name,DiskReadBytesPerSec from Win32_PerfRawData_PerfDisk_PhysicalDisk select * from Win32_PerfRawData_PerfProc_Process ; SoftwareMap ; In Windows 2003 Server, Win32_Product is not enabled by default, and ; must be enabled as follows: ; 1. In Add or Remove Programs, click Add/Remove Windows Components. ; 2. In the Windows Components Wizard, select Management and Monitoring ; Tools and then click Details. ; 3. In the Management and Monitoring Tools dialog box, select WMI ; Windows Installer Provider and then click OK. ; 4. Click Next. ; Select name,installdate from Win32_Product ; ZenPacks.zenoss.MSMQMonitor modeler plugins ; MSMQQueueMap ; Select name From Win32_PerfFormattedData_MSMQ_MSMQQueue [subscriptions] all_app.path = Application all_app.select = * all_sys.path = System all_sys.select = * txwinrm-1.2.7/examples/jenkins.sh000066400000000000000000000013311305406262000170400ustar00rootroot00000000000000echo "PATH=.env/bin:$PATH" > my.props grep version setup.py | sed "s/^.*version='\(.*\)',$/TXWINRM_SETUP_VERSION=\1/" >> my.props # Inject environment variables if [ -d ".env" ]; then echo "**> virtualenv exists" else echo "**> creating virtualenv" virtualenv .env fi easy_install twisted easy_install flake8 easy_install coverage if [ -d "cyclic_complexity" ]; then echo "**> cyclic_complexity exists" else echo "**> creating cyclic_complexity" git clone https://github.com/dgladkov/cyclic_complexity fi python setup.py sdist python -m unittest discover flake8 txwinrm coverage run --include="txwinrm/*" --omit="txwinrm/test/*" -m unittest discover coverage report --fail-under=60 txwinrm/test/complex txwinrm-1.2.7/examples/krb5.conf000066400000000000000000000006721305406262000165640ustar00rootroot00000000000000[logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = SOLUTIONS.LOC dns_lookup_realm = false dns_lookup_kdc = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = true [realms] SOLUTIONS.LOC = { kdc = 10.30.1.10 admin_server = 10.30.1.10 } [domain_realm] .solutions.loc = SOLUTIONS.LOC solutions.loc = SOLUTIONS.LOC txwinrm-1.2.7/gpl-2.0.txt000077500000000000000000000432541305406262000150620ustar00rootroot00000000000000 GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 1989, 1991 Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose authors commit to using it. (Some other Free Software Foundation software is covered by the GNU Lesser General Public License instead.) You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things. To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it. For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights that you have. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the software. Also, for each author's protection and ours, we want to make certain that everyone understands that there is no warranty for this free software. If the software is modified by someone else and passed on, we want its recipients to know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations. Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all. The precise terms and conditions for copying, distribution and modification follow. GNU GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you". Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. 1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change. b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License. c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program. In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. 3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following: a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.) The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable. If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. 4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. 5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License. 7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. 9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation. 10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally. NO WARRANTY 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively convey the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. Copyright (C) This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. Also add information on how to contact you by electronic and paper mail. If the program is interactive, make it output a short notice like this when it starts in an interactive mode: Gnomovision version 69, Copyright (C) year name of author Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, the commands you use may be called something other than `show w' and `show c'; they could even be mouse-clicks or menu items--whatever suits your program. You should also get your employer (if you work as a programmer) or your school, if any, to sign a "copyright disclaimer" for the program, if necessary. Here is a sample; alter the names: Yoyodyne, Inc., hereby disclaims all copyright interest in the program `Gnomovision' (which makes passes at compilers) written by James Hacker. , 1 April 1989 Ty Coon, President of Vice This General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License. txwinrm-1.2.7/scripts/000077500000000000000000000000001305406262000147165ustar00rootroot00000000000000txwinrm-1.2.7/scripts/genkrb5conf000077500000000000000000000006141305406262000170500ustar00rootroot00000000000000#! /bin/sh ############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## python -m txwinrm.genkrb5conf "$@" txwinrm-1.2.7/scripts/typeperf000077500000000000000000000006111305406262000165000ustar00rootroot00000000000000#! /bin/sh ############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## python -m txwinrm.typeperf "$@" txwinrm-1.2.7/scripts/wecutil000077500000000000000000000006101305406262000163150ustar00rootroot00000000000000#! /bin/sh ############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## python -m txwinrm.wecutil "$@" txwinrm-1.2.7/scripts/winrm000077500000000000000000000006061305406262000160020ustar00rootroot00000000000000#! /bin/sh ############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## python -m txwinrm.winrm "$@" txwinrm-1.2.7/scripts/winrs000077500000000000000000000006061305406262000160100ustar00rootroot00000000000000#! /bin/sh ############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## python -m txwinrm.winrs "$@" txwinrm-1.2.7/setup.py000077500000000000000000000024241305406262000147460ustar00rootroot00000000000000#!/usr/bin/env python ############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## setup_kwargs = dict( name='txwinrm', version='1.2.7', description='Asynchronous Python WinRM client', long_description=open('README.rst').read(), license='See LICENSE file', author='Zenoss', author_email='dbouchillon@zenoss.com', url='https://github.com/zenoss/txwinrm', packages=['txwinrm', 'txwinrm.request'], package_data={'txwinrm.request': ['*.xml']}, scripts=[ 'scripts/winrm', 'scripts/winrs', 'scripts/wecutil', 'scripts/typeperf', 'scripts/genkrb5conf']) try: from setuptools import setup setup_kwargs['install_requires'] = ['twisted', 'kerberos', 'pyOpenSSL'] try: import argparse if False: argparse except ImportError: setup_kwargs['install_requires'].append('argparse') setup(**setup_kwargs) except ImportError: from distutils.core import setup setup(**setup_kwargs) txwinrm-1.2.7/txwinrm/000077500000000000000000000000001305406262000147375ustar00rootroot00000000000000txwinrm-1.2.7/txwinrm/SessionManager.py000077500000000000000000000146631305406262000202440ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2016, all rights reserved. # # This content is made available according to terms specified in # License.zenoss under the directory where your Zenoss product is installed. # ############################################################################## """txsessionmgr - Python module for a single persistent connection to a device for multiple clients. Useful for situations when multiple connections to a device can be handled with one connection through a single login, e.g. txciscoapic, txwinrm The global SESSION_MANAGER is instantiated one time and is used to manage all sessions Session should be subclassed and implemented to login/logout, send requests, and handle responses A Client should always have a key property. This will be unique to the types of transactions/requests being made through a single Session """ from twisted.internet.defer import inlineCallbacks, returnValue class Session(object): """Session handler for connection to a device. Session class is responsible for implementing the login/logout methods. """ def __init__(self): # Used to keep track of clients using session. self._clients = set() # The currently valid token. This can be anything that the client # needs to know the connection is alive. self._token = None # Deferred waiting for login result. self._login_d = None # Error from last login if applicable. self._login_error = None @inlineCallbacks def deferred_login(self, client): """Kick off a deferred login to a device from the first client that needs the connection. Subsequent clients will use the data returned from the first login. :param client: Client initiating a connection :type client: ZenPack specific client :rtype: Deferred :return: Returns ZenPack unique token to be used for a session. """ self._clients.add(client) if self._token: returnValue(self._token) # No one already waiting for a token. Login to get a new one. if not self._login_d or self._login_d.called: self._login_d = self._deferred_login(client) try: self._token = yield self._login_d except Exception as e: self._login_error = e raise # At least one other client is already waiting for a token, and # the login to get it is already in progress. Wait for that # login to finish, then return its token. else: yield self._login_d if self._login_error: raise self._login_error returnValue(self._token) @inlineCallbacks def deferred_logout(self, client): """Calls session._deferred_logout() only if all other clients using the same session have also called deferred_logout. """ if len(self._clients) <= 1: if self._token: try: yield self._deferred_logout(client) except Exception: pass self._token = None if client in self._clients: self._clients.remove(client) returnValue(None) @inlineCallbacks def _deferred_login(self, client): """Performs the ZenPack specific login to a device. This will only be called from the first client to fire off the deferred. All other clients will use the _token returned from this method. :param client: Client initiating a connection :type client: ZenPack specific client :rtype: Deferred :return: Returns a Deferred which is logs into the device. """ returnValue(None) @inlineCallbacks def _deferred_logout(self, client): """Performs the ZenPack specific logout from a device. This will only be called by the last client to logout of the session. :param client: Client closing connection :type client: ZenPack specific client :rtype: Deferred :return: Returns a Deferred which logs out of the device. """ returnValue(None) class SessionManager(object): """Class to manage open sessions to devices.""" def __init__(self): # Used to keep track of sessions. self._sessions = {} def get_connection(self, key): """Return the session for a given key.""" if key is None: raise Exception('Client key cannot be empty') return self._sessions.get(key, None) def remove_connection(self, key): """End a session by a key. This can happen if the token is too old, the server reboots, or if the XML API is disabled and enabled. """ session = self.get_connection(key) if session: self._sessions.pop(key) @inlineCallbacks def init_connection(self, client, session_class=Session): """Initialize connection to device. If a session is already started return it else kick off deferred to initiate session. The client must contain a key for session storage. :param client: Client initiating connection :type client: ZenPack defined client """ if not hasattr(client, 'key'): raise Exception('Client must contain a key field') session = self.get_connection(client.key) if session: if session._token: if client not in session._clients: session._clients.add(client) returnValue(session._token) if session is None: session = session_class() self._sessions[client.key] = session token = yield session.deferred_login(client) returnValue(token) @inlineCallbacks def close_connection(self, client): """Kick off a session's logout. If there are no more clients using a session, remove it. :param client: Client closing connection :type client: ZenPack defined class """ session = self.get_connection(client.key) if not session: returnValue(None) yield session.deferred_logout(client) if not session._clients: # No more clients so we don't need to keep the session. self._sessions.pop(client.key) returnValue(None) SESSION_MANAGER = SessionManager() txwinrm-1.2.7/txwinrm/WinRMClient.py000077500000000000000000000635551305406262000174650ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import logging from collections import namedtuple from httplib import BAD_REQUEST, UNAUTHORIZED, FORBIDDEN, OK import shlex from cStringIO import StringIO from twisted.internet import reactor from twisted.internet.defer import ( inlineCallbacks, returnValue, DeferredSemaphore, succeed ) from twisted.internet.error import TimeoutError try: from twisted.web.client import ResponseFailed ResponseFailed except ImportError: class ResponseFailed(Exception): pass from . import constants as c from .util import ( _authenticate_with_kerberos, _get_agent, verify_conn_info, _CONTENT_TYPE, _ENCRYPTED_CONTENT_TYPE, Headers, _get_basic_auth_header, _get_request_template, _StringProducer, get_auth_details, UnauthorizedError, ForbiddenError, RequestError, _ErrorReader, _StringProtocol, ET, ) from .shell import ( _find_shell_id, _build_command_line_elem, _find_command_id, _MAX_REQUESTS_PER_COMMAND, _find_stream, _find_exit_code, CommandResponse, _stripped_lines ) from .enumerate import ( DEFAULT_RESOURCE_URI, SaxResponseHandler, _MAX_REQUESTS_PER_ENUMERATION ) from .SessionManager import SESSION_MANAGER, Session kerberos = None LOG = logging.getLogger('winrm') EnumInfo = namedtuple('EnumInfo', ['wql', 'resource_uri']) def _build_ps_command_line_elem(ps_command, ps_script): """Build PowerShell command line elements without splitting the actual ps script into arguments. using _build_command_line_elem with a ps script splits the script into separate arguments. Remote Windows shell inserts spaces when reconstituting the script. ps_command - powershell command with arguments as string e.g. 'powershell -NoLogo -NonInteractive -NoProfile -Command' ps_script - script to be run in powershell as single line string e.g. "& {get-counter -counter \"\memory\pages output/sec\" }" """ command_line_parts = shlex.split(ps_command, posix=False) # ensure '-command' is last if command_line_parts[-1:][0].lower() != '-command': index = 0 for option in command_line_parts: if option.lower() == '-command': command_line_parts.pop(index) break index += 1 command_line_parts.append(option) prefix = "rsp" ET.register_namespace(prefix, c.XML_NS_MSRSP) command_line_elem = ET.Element('{%s}CommandLine' % c.XML_NS_MSRSP) command_elem = ET.Element('{%s}Command' % c.XML_NS_MSRSP) command_elem.text = command_line_parts[0] command_line_elem.append(command_elem) for arguments_text in command_line_parts[1:]: arguments_elem = ET.Element('{%s}Arguments' % c.XML_NS_MSRSP) arguments_elem.text = arguments_text command_line_elem.append(arguments_elem) arguments_elem = ET.Element('{%s}Arguments' % c.XML_NS_MSRSP) arguments_elem.text = ps_script command_line_elem.append(arguments_elem) tree = ET.ElementTree(command_line_elem) str_io = StringIO() tree.write(str_io, encoding='utf-8') return str_io.getvalue() class WinRMSession(Session): ''' Session class to keep track of single winrm connection ''' def __init__(self): super(WinRMSession, self).__init__() # twisted agent to send http/https requests self._agent = _get_agent() # our kerberos context for encryption/decryption self._gssclient = None # url for session self._url = None # headers to use for requests self._headers = None # connection info. see util.ConnectionInfo self._conn_info = None # DeferredSemaphore so that we complete one transaction/conversation # at a time. Windows cannot handle mixed transaction types on one # connection. self.sem = DeferredSemaphore(1) self._refresh_dc = None def is_kerberos(self): return self._conn_info.auth_type == 'kerberos' def decrypt_body(self, body): return self._gssclient.decrypt_body(body) def _set_headers(self): if self._headers: return self._headers if self._conn_info.auth_type == 'basic': self._headers = Headers(_CONTENT_TYPE) self._headers.addRawHeader('Connection', self._conn_info.connectiontype) self._headers.addRawHeader( 'Authorization', _get_basic_auth_header(self._conn_info)) elif self.is_kerberos(): self._headers = Headers(_ENCRYPTED_CONTENT_TYPE) self._headers.addRawHeader('Connection', self._conn_info.connectiontype) return self._headers @inlineCallbacks def _deferred_login(self, client=None): if client: self._conn_info = client._conn_info self._url = "{c.scheme}://{c.ipaddress}:{c.port}/wsman".format(c=self._conn_info) if self.is_kerberos(): self._gssclient = yield _authenticate_with_kerberos(self._conn_info, self._url, self._agent) returnValue(self._gssclient) else: returnValue('basic_auth_token') @inlineCallbacks def _deferred_logout(self): # close connections so we do not end up with orphans # return a Deferred() self.loggedout = True if self._agent and hasattr(self._agent, 'closeCachedConnections'): # twisted 11 has no return and is part of the Agent return succeed(self._agent.closeCachedConnections()) elif self._agent: # twisted 12 returns a Deferred return self._agent._pool.closeCachedConnections() else: # no agent return succeed(None) @inlineCallbacks def handle_response(self, request, response, client): if response.code == UNAUTHORIZED or response.code == BAD_REQUEST: # check to see if we need to re-authorize due to lost connection or bad request error if self._gssclient is not None: self._gssclient.cleanup() self._gssclient = None self._token = None self._agent = _get_agent() self._login_d = None yield SESSION_MANAGER.init_connection(client, WinRMSession) try: yield self._set_headers() encrypted_request = self._gssclient.encrypt_body(request) if not encrypted_request.startswith("--Encrypted Boundary"): self._headers.setRawHeaders('Content-Type', _CONTENT_TYPE['Content-Type']) body_producer = _StringProducer(encrypted_request) response = yield self._agent.request( 'POST', self._url, self._headers, body_producer) except Exception as e: raise e if response.code == UNAUTHORIZED: if self.is_kerberos(): if not kerberos: from .util import kerberos auth_header = response.headers.getRawHeaders('WWW-Authenticate')[0] auth_details = get_auth_details(auth_header) try: if auth_details: self._gssclient._step(auth_details) except kerberos.GSSError as e: msg = "HTTP Unauthorized received. " "Kerberos error code {0}: {1}.".format(e.args[1][1], e.args[1][0]) raise Exception(msg) raise UnauthorizedError( "HTTP Unauthorized received: Check username and password") if response.code == FORBIDDEN: raise ForbiddenError( "Forbidden: Check WinRM port and version") elif response.code != OK: if self.is_kerberos(): reader = _ErrorReader(self._gssclient) else: reader = _ErrorReader() response.deliverBody(reader) message = yield reader.d raise RequestError("HTTP status: {}. {}".format( response.code, message)) returnValue(response) @inlineCallbacks def send_request(self, request_template_name, client, envelope_size=None, **kwargs): response = yield self._send_request( request_template_name, client, envelope_size=envelope_size, **kwargs) proto = _StringProtocol() response.deliverBody(proto) body = yield proto.d if self.is_kerberos(): xml_str = self._gssclient.decrypt_body(body) else: xml_str = yield body if LOG.isEnabledFor(logging.DEBUG): try: import xml.dom.minidom xml = xml.dom.minidom.parseString(xml_str) LOG.debug(xml.toprettyxml()) except: LOG.debug('Could not prettify response XML: "{0}"'.format(xml_str)) returnValue(ET.fromstring(xml_str)) @inlineCallbacks def _send_request(self, request_template_name, client, envelope_size=None, locale=None, code_page=None, **kwargs): kwargs['envelope_size'] = envelope_size or client._conn_info.envelope_size kwargs['locale'] = locale or client._conn_info.locale kwargs['code_page'] = code_page or client._conn_info.code_page if self._login_d and not self._login_d.called: # check for a reconnection attempt so we do not send any requests # to a dead connection yield self._login_d LOG.debug('sending request: {0} {1}'.format( request_template_name, kwargs)) request = _get_request_template(request_template_name).format(**kwargs) self._headers = self._set_headers() if self.is_kerberos(): encrypted_request = self._gssclient.encrypt_body(request) if not encrypted_request.startswith("--Encrypted Boundary"): self._headers.setRawHeaders('Content-Type', _CONTENT_TYPE['Content-Type']) body_producer = _StringProducer(encrypted_request) else: body_producer = _StringProducer(request) try: response = yield self._agent.request( 'POST', self._url, self._headers, body_producer) except Exception as e: raise e LOG.debug('received response {0} {1}'.format( response.code, request_template_name)) response = yield self.handle_response(request, response, client) returnValue(response) def close_connection(self, client): try: self._refresh_dc.cancel() except Exception: pass # Close the connection after 60 seconds. This will give other clients # enough time to keep the connection alive and continue using the same session. self._refresh_dc = reactor.callLater(60, SESSION_MANAGER.close_connection, client) class WinRMClient(object): """Base winrm client class Contains core functionality for various types of winrm based clients """ def __init__(self, conn_info): verify_conn_info(conn_info) self.key = None self._conn_info = conn_info self.session_manager = SESSION_MANAGER self._session = None self.ps_script = None @inlineCallbacks def init_connection(self): '''Initialize a connection through the session_manager''' yield self.session_manager.init_connection(self, WinRMSession) self._session = self.session_manager.get_connection(self.key) returnValue(None) def is_kerberos(self): return self._conn_info.auth_type == 'kerberos' def decrypt_body(self, body): return self._session.decrypt_body(body) @inlineCallbacks def _create_shell(self): elem = yield self._session.send_request('create', self) returnValue(_find_shell_id(elem)) @inlineCallbacks def _delete_shell(self, shell_id): yield self._session.send_request('delete', self, shell_id=shell_id) returnValue(None) @inlineCallbacks def _signal_terminate(self, shell_id, command_id): yield self._session.send_request('signal', self, shell_id=shell_id, command_id=command_id, signal_code=c.SHELL_SIGNAL_TERMINATE) returnValue(None) @inlineCallbacks def _signal_ctrl_c(self, shell_id, command_id): yield self._session.send_request('signal', self, shell_id=shell_id, command_id=command_id, signal_code=c.SHELL_SIGNAL_CTRL_C) returnValue(None) @inlineCallbacks def _send_command(self, shell_id, command_line): if self.ps_script is not None: command_line_elem = _build_ps_command_line_elem(command_line, self.ps_script) else: command_line_elem = _build_command_line_elem(command_line) LOG.debug('WinRMClient._send_command: sending command request ' '(shell_id={0}, command_line_elem={1})'.format( shell_id, command_line_elem)) command_elem = yield self._session.send_request( 'command', self, shell_id=shell_id, command_line_elem=command_line_elem, timeout=self._conn_info.timeout) returnValue(command_elem) @inlineCallbacks def _send_receive(self, shell_id, command_id): receive_elem = yield self._session.send_request( 'receive', self, shell_id=shell_id, command_id=command_id) returnValue(receive_elem) @inlineCallbacks def close_connection(self): yield self._session.close_connection(self) returnValue(None) class SingleCommandClient(WinRMClient): """Client to send a single command to a winrm device""" def __init__(self, conn_info): super(SingleCommandClient, self).__init__(conn_info) self.key = (self._conn_info.ipaddress, 'short') @inlineCallbacks def run_command(self, command_line, ps_script=None): """Run a single command in the session's semaphore. Windows must finish a command conversation before a new command or enumeration can start If running a powershell script, send it in separately with ps_script in "& {}" format e.g. command_line='powershell -NoLogo -NonInteractive -NoProfile -Command', ps_script='"& {get-counter -counter \\\"\memory\pages output/sec\\\" }"' """ cmd_response = None self.ps_script = ps_script yield self.init_connection() try: cmd_response = yield self._session.sem.run(self.run_single_command, command_line) except Exception: yield self.close_connection() raise returnValue(cmd_response) @inlineCallbacks def run_single_command(self, command_line): """ Run a single command line in a remote shell like the winrs application on Windows. Returns a dictionary with the following structure: CommandResponse .stdout = [, ...] .stderr = [, ...] .exit_code = """ shell_id = yield self._create_shell() cmd_response = None try: cmd_response = yield self._run_command(shell_id, command_line) except TimeoutError: yield self.close_connection() yield self._delete_shell(shell_id) yield self.close_connection() returnValue(cmd_response) @inlineCallbacks def _run_command(self, shell_id, command_line): command_elem = yield self._send_command(shell_id, command_line) command_id = _find_command_id(command_elem) stdout_parts = [] stderr_parts = [] for i in xrange(_MAX_REQUESTS_PER_COMMAND): receive_elem = yield self._send_receive(shell_id, command_id) stdout_parts.extend( _find_stream(receive_elem, command_id, 'stdout')) stderr_parts.extend( _find_stream(receive_elem, command_id, 'stderr')) exit_code = _find_exit_code(receive_elem, command_id) if exit_code is not None: break else: raise Exception("Reached max requests per command.") yield self._signal_terminate(shell_id, command_id) stdout = _stripped_lines(stdout_parts) stderr = _stripped_lines(stderr_parts) returnValue(CommandResponse(stdout, stderr, exit_code)) class LongCommandClient(WinRMClient): """Client to run a single long running command to a winrm device""" def __init__(self, conn_info): super(LongCommandClient, self).__init__(conn_info) self._shell_id = None self._command_id = None self._exit_code = None @inlineCallbacks def start(self, command_line, ps_script=''): """Start long running command If running a powershell script, send it in separately with ps_script in "& {}" format e.g. command_line='powershell -NoLogo -NonInteractive -NoProfile -Command', ps_script='"& {get-counter -counter \\\"\memory\pages output/sec\\\" }"' """ LOG.debug("LongRunningCommand run_command: {0}".format(command_line)) self.key = (self._conn_info.ipaddress, command_line + str(ps_script)) self.ps_script = ps_script yield self.init_connection() self._shell_id = yield self._create_shell() try: command_elem = yield self._send_command(self._shell_id, command_line) except TimeoutError: yield self.close_connection() raise self._command_id = _find_command_id(command_elem) returnValue(None) @inlineCallbacks def receive(self): try: receive_elem = yield self._send_receive(self._shell_id, self._command_id) except TimeoutError: yield self.close_connection() raise stdout_parts = _find_stream(receive_elem, self._command_id, 'stdout') stderr_parts = _find_stream(receive_elem, self._command_id, 'stderr') self._exit_code = _find_exit_code(receive_elem, self._command_id) stdout = _stripped_lines(stdout_parts) stderr = _stripped_lines(stderr_parts) returnValue((stdout, stderr)) @inlineCallbacks def stop(self, close=False): yield self._signal_ctrl_c(self._shell_id, self._command_id) try: stdout, stderr = yield self.receive() except TimeoutError: pass yield self._signal_terminate(self._shell_id, self._command_id) yield self._delete_shell(self._shell_id) if close: yield self.close_connection() returnValue(CommandResponse(stdout, stderr, self._exit_code)) class EnumerateClient(WinRMClient): """Client to send a single wmi query(WQL) to a winrm device Sends enumerate requests to a host running the WinRM service and returns a list of items. """ def __init__(self, conn_info): super(EnumerateClient, self).__init__(conn_info) self._handler = SaxResponseHandler(self) self._hostname = conn_info.ipaddress self.key = (conn_info.ipaddress, 'short') @inlineCallbacks def enumerate(self, wql, resource_uri=DEFAULT_RESOURCE_URI): """Runs a remote WQL query.""" yield self.init_connection() request_template_name = 'enumerate' enumeration_context = None items = [] try: for i in xrange(_MAX_REQUESTS_PER_ENUMERATION): LOG.info('{0} "{1}" {2}'.format( self._hostname, wql, request_template_name)) response = yield self._session._send_request( request_template_name, self, resource_uri=resource_uri, wql=wql, enumeration_context=enumeration_context) LOG.info("{0} {1} HTTP status: {2}".format( self._hostname, wql, response.code)) enumeration_context, new_items = \ yield self._handler.handle_response(response) items.extend(new_items) if not enumeration_context: break request_template_name = 'pull' else: raise Exception("Reached max requests per enumeration.") except (ResponseFailed, RequestError, Exception) as e: if isinstance(e, ResponseFailed): for reason in e.reasons: LOG.error('{0} {1}'.format(self._hostname, reason.value)) else: LOG.info('{0} {1}'.format(self._hostname, e)) raise returnValue(items) @inlineCallbacks def do_collect(self, enum_infos): """Run enumerations in the session's semaphore. Windows must finish an enumeration before a new command or enumeration can start """ items = {} yield self.init_connection() self._session = self.session_manager.get_connection(self.key) for enum_info in enum_infos: try: items[enum_info] = yield self._session.sem.run(self.enumerate, enum_info.wql, enum_info.resource_uri) except (UnauthorizedError, ForbiddenError): # Fail the collection for general errors. raise except RequestError: # Store empty results for other query-specific errors. continue yield self.close_connection() returnValue(items) class AssociatorClient(EnumerateClient): """WinRM Client that can return wmi classes that are associated with another wmi class through a single property. First a regular wmi query is run to select objects from a class. e.g. 'select * from Win32_NetworkAdapter' Next we will loop through the results and run the associator query using a specific property of the object as input to return a result class. e.g. for interface in interfaces: "ASSOCIATORS OF {Win32_NetworkAdapter.DeviceID=interface.DeviceID} WHERE ResultClass=Win32_PnPEntity' """ @inlineCallbacks def associate(self, seed_class, associations, where=None, resource_uri=DEFAULT_RESOURCE_URI, fields=['*']): """Method to retrieve associated wmi classes based upon a property from a given class seed_class - wmi class which will be initially queried associations - list of dicts containing parameters for the 'ASSOCIATORS of {A}' wql statement. We dequeue the dicts and can search results from previous wql query to search for nested associations. search_class - initial class to associate with search_property - property on search_class to match return_class - class which will be returned where_type - keyword of association type: AssocClass = AssocClassName RequiredAssocQualifier = QualifierName RequiredQualifier = QualifierName ResultClass = ClassName ResultRole = PropertyName Role = PropertyName where - wql where clause to narrow scope of initial query resource_uri - uri of resource. this will be the same for both input and result classes. Limitation of WQL fields - fields to return from seed_class on initial query returns dict of seed_class and all return_class results mapped by search_property see https://msdn.microsoft.com/en-us/library/aa384793(v=vs.85).aspx """ items = {} wql = 'Select {} from {}'.format(','.join(fields), seed_class) if where: wql += ' where {}'.format(where) enum_info = EnumInfo(wql, resource_uri) results = yield self.do_collect([enum_info]) input_results = results[enum_info] items[seed_class] = input_results while associations: association = associations.pop(0) associate_results = [] prop_results = {} for item in input_results: try: prop = getattr(item, association['search_property']) except AttributeError: continue else: wql = "ASSOCIATORS of {{{}.{}='{}'}} WHERE {}={}".format( association['search_class'], association['search_property'], prop, association['where_type'], association['return_class']) enum_info = EnumInfo(wql, resource_uri) result = yield self.do_collect([enum_info]) associate_results.extend(result[enum_info]) prop_results[prop] = result[enum_info] items[association['return_class']] = prop_results input_results = associate_results returnValue(items) txwinrm-1.2.7/txwinrm/__init__.py000066400000000000000000000005341305406262000170520ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## txwinrm-1.2.7/txwinrm/_zenclient.py000077500000000000000000000331251305406262000174520ustar00rootroot00000000000000from twisted.python import log from twisted.web._newclient import Request, HTTP11ClientProtocol, BadHeaders, ResponseFailed, \ RequestNotSent, TransportProxyProducer, HTTPClientParser, RequestGenerationFailed from twisted.web.client import Agent, _parse from twisted.python.failure import Failure from twisted.web.http_headers import Headers from twisted.internet.defer import Deferred, succeed, fail, maybeDeferred, DeferredSemaphore from twisted.internet.error import ConnectionDone try: from twisted.internet.ssl import ClientContextFactory except ImportError: class WebClientContextFactory(object): """ A web context factory which doesn't work because the necessary SSL support is missing. """ def getContext(self, hostname, port): raise NotImplementedError("SSL support unavailable") else: class WebClientContextFactory(ClientContextFactory): """ A web context factory which ignores the hostname and port and does no certificate verification. """ def getContext(self, hostname, port): return ClientContextFactory.getContext(self) class ZenRequest(Request): def __init__(self, method, uri, headers, bodyProducer, persistent=False): self.method = method self.uri = uri self.headers = headers self.bodyProducer = bodyProducer self.persistent = persistent def _writeHeaders(self, transport, TEorCL): hosts = self.headers.getRawHeaders('host', ()) if len(hosts) != 1: raise BadHeaders("Exactly one Host header required") # In the future, having the protocol version be a parameter to this # method would probably be good. It would be nice if this method # weren't limited to issueing HTTP/1.1 requests. requestLines = [] requestLines.append( '%s %s HTTP/1.1\r\n' % (self.method, self.uri)) if self.persistent: requestLines.append('Connection: Keep-Alive\r\n') else: requestLines.append('Connection: close\r\n') if TEorCL is not None: requestLines.append(TEorCL) for name, values in self.headers.getAllRawHeaders(): requestLines.extend(['%s: %s\r\n' % (name, v) for v in values]) requestLines.append('\r\n') transport.writeSequence(requestLines) class ZenHTTP11ClientProtocol(HTTP11ClientProtocol): @property def state(self): return self._state def request(self, request): """ Issue C{request} over C{self.transport} and return a L{Deferred} which will fire with a L{Response} instance or an error. @param request: The object defining the parameters of the request to issue. @type request: L{Request} @rtype: L{Deferred} @return: The deferred may errback with L{RequestGenerationFailed} if the request was not fully written to the transport due to a local error. It may errback with L{RequestTransmissionFailed} if it was not fully written to the transport due to a network error. It may errback with L{ResponseFailed} if the request was sent (not necessarily received) but some or all of the response was lost. It may errback with L{RequestNotSent} if it is not possible to send any more requests using this L{HTTP11ClientProtocol}. """ if self._state != 'QUIESCENT': return fail(RequestNotSent()) self._state = 'TRANSMITTING' _requestDeferred = maybeDeferred(request.writeTo, self.transport) self._finishedRequest = Deferred() # Keep track of the Request object in case we need to call stopWriting # on it. self._currentRequest = request self._transportProxy = TransportProxyProducer(self.transport) self._parser = HTTPClientParser(request, self._finishResponse) self._parser.makeConnection(self._transportProxy) self._responseDeferred = self._parser._responseDeferred def cbRequestWrotten(ignored): if self._state == 'TRANSMITTING': self._state = 'WAITING' self._responseDeferred.chainDeferred(self._finishedRequest) def ebRequestWriting(err): if self._state == 'TRANSMITTING': self._state = 'GENERATION_FAILED' self.transport.loseConnection() self._finishedRequest.errback( Failure(RequestGenerationFailed([err]))) else: log.err(err, "foo") _requestDeferred.addCallbacks(cbRequestWrotten, ebRequestWriting) return self._finishedRequest def _finishResponse(self, rest): """ Called by an L{HTTPClientParser} to indicate that it has parsed a complete response. @param rest: A C{str} giving any trailing bytes which were given to the L{HTTPClientParser} which were not part of the response it was parsing. """ assert self._state in ('WAITING', 'TRANSMITTING') if self._state == 'WAITING': self._state = 'QUIESCENT' else: # The server sent the entire response before we could send the # whole request. That sucks. Oh well. Fire the request() # Deferred with the response. But first, make sure that if the # request does ever finish being written that it won't try to fire # that Deferred. self._state = 'TRANSMITTING_AFTER_RECEIVING_RESPONSE' self._responseDeferred.chainDeferred(self._finishedRequest) reason = ConnectionDone("synthetic!") connHeaders = self._parser.connHeaders.getRawHeaders('connection') if (connHeaders is not None) and ('close' in connHeaders): self._giveUp(Failure(reason)) else: # It's persistent connection self._disconnectParser(reason) class ZenAgent(Agent): """ L{Agent} is a very basic HTTP client. It supports I{HTTP} and I{HTTPS} scheme URIs (but performs no certificate checking by default). It also supports persistent connections. @ivar _reactor: The L{IReactorTCP} and L{IReactorSSL} implementation which will be used to set up connections over which to issue requests. @ivar _contextFactory: A web context factory which will be used to create SSL context objects for any SSL connections the agent needs to make. @since: 9.0 @ivar persistent: Set to C{True} when you use HTTP persistent connecton. @type persistent: C{bool} @ivar maxConnectionsPerHostName: Max number of HTTP connections per a server. The default value is 1. This is effective only when the C{self.persistent} is C{True}. RFC 2616 says "A single-user client SHOULD NOT maintain more than 2 connections with any server or proxy." @type maxConnectionsPerHostName: C{int} @ivar _semaphores: A dictioinary mapping a tuple (scheme, host, port) to an instance of L{DeferredSemaphore}. It is used to limit the number of connections to a server when C{self.persistent==True}. @ivar _protocolCache: A dictioinary mapping a tuple (scheme, host, port) to a list of instances of L{HTTP11ClientProtocol}. It is used to cache the connections to the servers when C{self.persistent==True}. """ _protocol = ZenHTTP11ClientProtocol maxConnectionsPerHostName = 2 def __init__(self, reactor, contextFactory=WebClientContextFactory(), persistent=False, maxConnectionsPerHostName=2): self._reactor = reactor self._contextFactory = contextFactory self.persistent = persistent self.maxConnectionsPerHostName = maxConnectionsPerHostName self._semaphores = {} self._protocolCache = {} def request(self, method, uri, headers=None, bodyProducer=None): """ Issue a new request. @param method: The request method to send. @type method: C{str} @param uri: The request URI send. @type uri: C{str} @param scheme: A string like C{'http'} or C{'https'} (the only two supported values) to use to determine how to establish the connection. @param host: A C{str} giving the hostname which will be connected to in order to issue a request. @param port: An C{int} giving the port number the connection will be on. @param path: A C{str} giving the path portion of the request URL. @param headers: The request headers to send. If no I{Host} header is included, one will be added based on the request URI. @type headers: L{Headers} @param bodyProducer: An object which will produce the request body or, if the request body is to be empty, L{None}. @type bodyProducer: L{IBodyProducer} provider @return: A L{Deferred} which fires with the result of the request (a L{Response} instance), or fails if there is a problem setting up a connection over which to issue the request. It may also fail with L{SchemeNotSupported} if the scheme of the given URI is not supported. @rtype: L{Deferred} """ scheme, host, port, path = _parse(uri) if headers is None: headers = Headers() if not headers.hasHeader('host'): # This is a lot of copying. It might be nice if there were a bit # less. headers = Headers(dict(headers.getAllRawHeaders())) headers.addRawHeader( 'host', self._computeHostValue(scheme, host, port)) if self.persistent: sem = self._semaphores.get((scheme, host, port)) if sem is None: sem = DeferredSemaphore(self.maxConnectionsPerHostName) self._semaphores[scheme, host, port] = sem return sem.run(self._request, method, scheme, host, port, path, headers, bodyProducer) else: return self._request( method, scheme, host, port, path, headers, bodyProducer) def _request(self, method, scheme, host, port, path, headers, bodyProducer): """ Issue a new request. @param method: The request method to send. @type method: C{str} @param uri: The request URI send. @type uri: C{str} @param headers: The request headers to send. If no I{Host} header is included, one will be added based on the request URI. @type headers: L{Headers} @param bodyProducer: An object which will produce the request body or, if the request body is to be empty, L{None}. @type bodyProducer: L{IBodyProducer} provider @return: A L{Deferred} which fires with the result of the request (a L{Response} instance), or fails if there is a problem setting up a connection over which to issue the request. It may also fail with L{SchemeNotSupported} if the scheme of the given URI is not supported. @rtype: L{Deferred} """ protos = self._protocolCache.setdefault((scheme, host, port), []) maybeDisconnected = False #while protos: # # connection exists # p = protos.pop(0) d = None for p in protos: if p.state == 'QUIESCENT': # available existing connection d = succeed(p) maybeDisconnected = True break if not d: # new connection d = self._connect(scheme, host, port) req = ZenRequest(method, path, headers, bodyProducer, persistent=self.persistent) def saveProtocol(response, proto): if self.persistent and proto not in protos: protos.append(proto) return response def cbConnected(proto): def ebRequest(f): # Previous connection is unavailable. if f.check(ResponseFailed): for reason in f.value.reasons: if (isinstance(reason, Failure) and isinstance(reason.value, ConnectionDone)): # Maybe timeout has been exeeded before I send # the request. So I retry again. def retry(proto): d = proto.request(req) d.addCallback(saveProtocol, proto) return d d = self._connect(scheme, host, port) d.addCallback(retry) return d return f d = proto.request(req) d.addCallback(saveProtocol, proto) if maybeDisconnected: d.addErrback(ebRequest) return d d.addCallback(cbConnected) return d def closeCachedConnections(self): """ Close all the cached persistent connections. """ for protos in self._protocolCache.itervalues(): for p in protos: p.transport.loseConnection() self._protocolCache = {} txwinrm-1.2.7/txwinrm/app.py000066400000000000000000000231411305406262000160720ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import sys import logging from getpass import getpass from urlparse import urlparse from argparse import ArgumentParser from ConfigParser import RawConfigParser from twisted.internet import reactor, defer from twisted.internet.error import TimeoutError from .enumerate import create_winrm_client from .util import ConnectionInfo, verify_conn_info, UnauthorizedError logging.basicConfig() log = logging.getLogger('winrm') _exit_status = 0 DEFAULT_SCHEME = 'http' DEFAULT_PORT = 5985 def get_vmpeak(): with open('/proc/self/status') as status: for line in status: key, value = line.split(None, 1) if key == 'VmPeak:': return value @defer.inlineCallbacks def get_remote_process_stats(client): wql = 'select Name, IDProcess, PercentProcessorTime,' \ 'Timestamp_Sys100NS from Win32_PerfRawData_PerfProc_Process ' \ 'where name like "wmi%"' items = yield client.enumerate(wql) defer.returnValue(items) def calculate_remote_cpu_util(initial_stats, final_stats): cpu_util_info = [] for hostname, initial_stats_items in initial_stats.iteritems(): final_stats_items = final_stats[hostname] host_cpu_util_info = [] cpu_util_info.append([hostname, host_cpu_util_info]) for initial_stats_item in initial_stats_items: name = initial_stats_item.Name pid = initial_stats_item.IDProcess for final_stats_item in final_stats_items: if pid == final_stats_item.IDProcess: break else: print >>sys.stderr, "WARNING: Could not find final process " \ "stats for", hostname, pid continue x1 = float(final_stats_item.PercentProcessorTime) x0 = float(initial_stats_item.PercentProcessorTime) y1 = float(final_stats_item.Timestamp_Sys100NS) y0 = float(initial_stats_item.Timestamp_Sys100NS) cpu_pct = (x1 - x0) / (y1 - y0) host_cpu_util_info.append((cpu_pct, name, pid)) return cpu_util_info def print_remote_cpu_util(cpu_util_info): for hostname, stats in cpu_util_info: print >>sys.stderr, " ", hostname for cpu_pct, name, pid in stats: fmt = " {cpu_pct:.2%} of CPU time used by {name} "\ "process with pid {pid}" print >>sys.stderr, fmt.format(hostname=hostname, cpu_pct=cpu_pct, name=name, pid=pid) @defer.inlineCallbacks def get_initial_wmiprvse_stats(config): initial_wmiprvse_stats = {} good_conn_infos = [] for conn_info in config.conn_infos: try: client = create_winrm_client(conn_info) initial_wmiprvse_stats[conn_info.hostname] = \ yield get_remote_process_stats(client) good_conn_infos.append(conn_info) except UnauthorizedError: continue except TimeoutError: continue defer.returnValue((initial_wmiprvse_stats, good_conn_infos)) class ConfigDrivenUtility(object): def __init__(self, strategy): self._strategy = strategy @defer.inlineCallbacks def tx_main(self, args, config): global _exit_status do_summary = len(config.conn_infos) > 1 if do_summary: initial_wmiprvse_stats, good_conn_infos = \ yield get_initial_wmiprvse_stats(config) else: initial_wmiprvse_stats = None good_conn_infos = [config.conn_infos[0]] if not good_conn_infos: _exit_status = 1 stop_reactor() return @defer.inlineCallbacks def callback(results): if do_summary: yield self._print_summary( results, config, initial_wmiprvse_stats, good_conn_infos) d = self._strategy.act(good_conn_infos, args, config) d.addCallback(callback) d.addBoth(stop_reactor) @defer.inlineCallbacks def _print_summary( self, results, config, initial_wmiprvse_stats, good_conn_infos): global _exit_status final_wmiprvse_stats = {} for conn_info in good_conn_infos: client = create_winrm_client(conn_info) final_wmiprvse_stats[conn_info.hostname] = \ yield get_remote_process_stats(client) print >>sys.stderr, '\nSummary:' print >>sys.stderr, ' Connected to', len(good_conn_infos), 'of', \ len(config.conn_infos), 'hosts' print >>sys.stderr, " Processed", self._strategy.count_summary if results is not None: failure_count = 0 for success, result in results: if not success: failure_count += 1 if failure_count: _exit_status = 1 print >>sys.stderr, ' Failed to process', failure_count,\ "responses" print >>sys.stderr, " Peak virtual memory useage:", get_vmpeak() print >>sys.stderr, ' Remote CPU utilization:' cpu_util_info = calculate_remote_cpu_util( initial_wmiprvse_stats, final_wmiprvse_stats) print_remote_cpu_util(cpu_util_info) class Config(object): def __init__(self, conn_infos=None): self.conn_infos = conn_infos def _parse_remote(remote): url_parts = urlparse(remote) if url_parts.netloc: return url_parts.hostname, url_parts.scheme, url_parts.port return remote, DEFAULT_SCHEME, DEFAULT_PORT def _parse_config_file(filename, utility): parser = RawConfigParser(allow_no_value=True) parser.read(filename) creds = {} index = dict(authentication=0, username=1, password=2) for key, value in parser.items('credentials'): k1, k2 = key.split('.') if k1 not in creds: creds[k1] = [None, None, None] creds[k1][index[k2]] = value if not creds[k1][2]: creds[k1][2] = getpass('{0} password ({1} credentials):' .format(value, k1)) conn_infos = [] for remote, cred_key in parser.items('remotes'): auth_type, username, password = creds[cred_key] hostname, scheme, port = _parse_remote(remote) connectiontype = 'Keep-Alive' keytab = '' dcip = '' conn_info = ConnectionInfo( hostname, auth_type, username, password, scheme, port, connectiontype, keytab, dcip,) try: verify_conn_info(conn_info) except Exception as e: print >>sys.stderr, "ERROR: {0}".format(e) continue conn_infos.append(conn_info) config = Config(conn_infos) utility.add_config(parser, config) return config def _parse_args(utility): parser = ArgumentParser() parser.add_argument("--debug", "-d", action="store_true") parser.add_argument("--config", "-c") parser.add_argument("--remote", "-r", help="hostname") parser.add_argument("--authentication", "-a", default='basic', choices=['basic', 'kerberos']) parser.add_argument("--username", "-u") parser.add_argument("--dcip", "-i", help="address of kdc") parser.add_argument("--keytab", "-k") parser.add_argument("--password", "-p") parser.add_argument("--ipaddress", "-s") parser.add_argument("--service", "-e", help='http/https/wsman', default='http') parser.add_argument("--includedir", help="valid includedir") utility.add_args(parser) args = parser.parse_args() if not args.config: if not args.remote or not args.username: print >>sys.stderr, "ERROR: You must specify a config file with " \ "-c or specify remote and username" sys.exit(1) if not utility.check_args(args): sys.exit(1) if args.remote: hostname, scheme, port = _parse_remote(args.remote) password = args.password if not password: password = getpass() connectiontype = 'Keep-Alive' args.conn_info = ConnectionInfo( hostname, args.authentication, args.username, password, scheme, port, connectiontype, args.keytab, args.dcip, ipaddress=args.ipaddress, service=args.service, include_dir=args.includedir) try: verify_conn_info(args.conn_info) except Exception as e: print >>sys.stderr, "ERROR: {0}".format(e) sys.exit(1) for attr in 'remote', 'authentication', 'username': delattr(args, attr) return args def _adapt_args_to_config(args, utility): config = Config([args.conn_info]) utility.adapt_args_to_config(args, config) return config def main(utility): args = _parse_args(utility) if args.debug: log.setLevel(level=logging.DEBUG) defer.setDebugging(True) if args.config: config = _parse_config_file(args.config, utility) else: config = _adapt_args_to_config(args, utility) reactor.callWhenRunning(utility.tx_main, args, config) reactor.run() sys.exit(_exit_status) def stop_reactor(*args, **kwargs): if reactor.running: reactor.stop() txwinrm-1.2.7/txwinrm/associate.py000077500000000000000000000053461305406262000172770ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import logging from twisted.internet import defer from WinRMClient import AssociatorClient from .util import ( ConnectionInfo, ) log = logging.getLogger('winrm') # for use with seed_class of Win32_NetworkAdapter interface_map = [{'return_class': 'Win32_PnPEntity', 'search_class': 'win32_NetworkAdapter', 'search_property': 'DeviceID', 'where_type': 'ResultClass' }] # for use with seed_class of Win32_DiskDrive disk_map = [{'return_class': 'Win32_DiskDriveToDiskPartition', 'search_class': 'Win32_DiskDrive', 'search_property': 'DeviceID', 'where_type': 'AssocClass'}, {'return_class': 'Win32_LogicalDiskToPartition', 'search_class': 'Win32_DiskPartition', 'search_property': 'DeviceID', 'where_type': 'AssocClass' }] class WinrmAssociatorClient(object): @defer.inlineCallbacks def do_associate(self, conn_info): """ """ client = AssociatorClient(conn_info) items = {} items = yield client.associate( 'Win32_DiskDrive', disk_map ) defer.returnValue(items) # ----- An example of usage... if __name__ == '__main__': from pprint import pprint import logging from twisted.internet import reactor logging.basicConfig() winrm = WinrmAssociatorClient() # Enter your params here before running params = { 'hostname': "", # name of host 'authtype': "", # kerberos or basic 'user': "", # username 'password': "", # password 'kdc': "", # kdc address 'ipaddress': "" # ip address } ''' Remove this line and line at the end to run test @defer.inlineCallbacks def do_example_collect(): connectiontype = 'Keep-Alive' conn_info = ConnectionInfo( params['hostname'], params['authtype'], params['user'], params['password'], "http", 5985, connectiontype, "", params['kdc'], ipaddress=params['ipaddress']) items = yield winrm.do_associate(conn_info) pprint(items) pprint(items.keys()) reactor.stop() reactor.callWhenRunning(do_example_collect) reactor.run() Remove this line to execute above code''' txwinrm-1.2.7/txwinrm/collect.py000066400000000000000000000047561305406262000167520ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import logging from collections import namedtuple from twisted.internet import defer from .enumerate import create_winrm_client, DEFAULT_RESOURCE_URI from .util import ( ConnectionInfo, ForbiddenError, RequestError, UnauthorizedError, ) EnumInfo = namedtuple('EnumInfo', ['wql', 'resource_uri']) log = logging.getLogger('winrm') def create_enum_info(wql, resource_uri=DEFAULT_RESOURCE_URI): return EnumInfo(wql, resource_uri) class WinrmCollectClient(object): @defer.inlineCallbacks def do_collect(self, conn_info, enum_infos): """ conn_info has the following attributes hostname auth_type: basic or kerberos username password scheme: http (https coming soon) port: int """ client = create_winrm_client(conn_info) items = {} for enum_info in enum_infos: try: items[enum_info] = yield client.enumerate( enum_info.wql, enum_info.resource_uri) except (UnauthorizedError, ForbiddenError): # Fail the collection for general errors. raise except RequestError: # Store empty results for other query-specific errors. continue defer.returnValue(items) # ----- An example of useage... if __name__ == '__main__': from pprint import pprint import logging from twisted.internet import reactor logging.basicConfig() winrm = WinrmCollectClient() @defer.inlineCallbacks def do_example_collect(): connectiontype = 'Keep-Alive' conn_info = ConnectionInfo( "10.30.50.34", "kerberos", "rbooth@SOLUTIONS.LOC", "", "http", 5985, connectiontype, "/home/zenoss/rbooth.keytab", '') wql1 = create_enum_info( 'Select Caption, DeviceID, Name From Win32_Processor') wql2 = create_enum_info( 'select Name, Label, Capacity from Win32_Volume') items = yield winrm.do_collect(conn_info, [wql1, wql2]) pprint(items) reactor.stop() reactor.callWhenRunning(do_example_collect) reactor.run() txwinrm-1.2.7/txwinrm/constants.py000066400000000000000000000026461305406262000173350ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## XML_NS_SOAP_1_2 = 'http://www.w3.org/2003/05/soap-envelope' XML_NS_CIM_SCHEMA = "http://schemas.dmtf.org/wbem/wscim/1/common" XML_NS_WS_MAN = 'http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd' XML_NS_ENUMERATION = 'http://schemas.xmlsoap.org/ws/2004/09/enumeration' XML_NS_EVENTING = 'http://schemas.xmlsoap.org/ws/2004/08/eventing' XML_NS_BUILTIN = 'http://www.w3.org/2001/XMLSchema-instance' XML_NS_MSWSMAN = 'http://schemas.microsoft.com/wbem/wsman/1/wsman.xsd' XML_NS_MSRSP = 'http://schemas.microsoft.com/wbem/wsman/1/windows/shell' XML_NS_MSEVENT = 'http://schemas.microsoft.com/win/2004/08/events/event' SOAP_HEADER = 'Header' SOAP_BODY = 'Body' BUILTIN_NIL = 'nil' WSM_XML_FRAGMENT = 'XmlFragment' WSENUM_ENUMERATION_CONTEXT = 'EnumerationContext' WSENUM_END_OF_SEQUENCE = 'EndOfSequence' WSENUM_ITEMS = 'Items' WMICIMV2 = 'http://schemas.microsoft.com/wbem/wsman/1/wmi/root/cimv2' SHELL_SIGNAL_TERMINATE = \ 'http://schemas.microsoft.com/wbem/wsman/1/windows/shell/signal/terminate' SHELL_SIGNAL_CTRL_C = \ 'http://schemas.microsoft.com/wbem/wsman/1/windows/shell/signal/ctrl_c' txwinrm-1.2.7/txwinrm/enumerate.py000077500000000000000000000524131305406262000173060ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## """ This module contains the code responsible for constructing WinRM enumeration and pull requests containing WQL queries. The responses are parsed with the result being a list of item objects. The item objects have a dynamic set of attributes, even within the same query. Some of the Win32_* CIM classes have optional properties, and a 'select *' query will return those attributes only on the items that have them. Some of the items returned might be subclasses of the CIM class mentioned in the query and contain additional attributes. The attributes of the returned item objects follow these rules * nil values are None * empty values are empty * text values are strings * numeric values are strings ready to be sent through int() or float() * missing values are missing * array values are lists * date values are datetime objects """ import logging from cStringIO import StringIO from collections import deque from pprint import pformat from xml import sax from twisted.internet import defer from twisted.internet.protocol import Protocol try: from twisted.web.client import ResponseFailed ResponseFailed except ImportError: class ResponseFailed(Exception): pass from . import constants as c from .util import RequestSender, get_datetime, RequestError log = logging.getLogger('winrm') _MAX_REQUESTS_PER_ENUMERATION = 9999 DEFAULT_RESOURCE_URI = '{0}/*'.format(c.WMICIMV2) _MARKER = object() class WinrmClient(object): """ Sends enumerate requests to a host running the WinRM service and returns a list of items. """ def __init__(self, sender, handler): self._sender = sender self._handler = handler self._hostname = sender.hostname @defer.inlineCallbacks def enumerate(self, wql, resource_uri=DEFAULT_RESOURCE_URI): """ Runs a remote WQL query. """ request_template_name = 'enumerate' enumeration_context = None items = [] try: for i in xrange(_MAX_REQUESTS_PER_ENUMERATION): log.debug('{0} "{1}" {2}'.format( self._hostname, wql, request_template_name)) response = yield self._sender.send_request( request_template_name, resource_uri=resource_uri, wql=wql, enumeration_context=enumeration_context) log.debug("{0} HTTP status: {1}".format( self._hostname, response.code)) enumeration_context, new_items = \ yield self._handler.handle_response(response) items.extend(new_items) if not enumeration_context: break request_template_name = 'pull' else: raise Exception("Reached max requests per enumeration.") except (ResponseFailed, RequestError, Exception) as e: if isinstance(e, ResponseFailed): for reason in e.reasons: log.error('{0} {1}'.format(self._hostname, reason.value)) else: log.debug('{0} {1}'.format(self._hostname, e)) raise yield self._sender.close_connections() defer.returnValue(items) def create_winrm_client(conn_info): """ Constructs a WinRM client with the default response handler. """ sender = RequestSender(conn_info) return WinrmClient(sender, SaxResponseHandler(sender)) def create_parser_and_factory(): """ Sets up the SAX XML parser and returns it along with an EnvelopeHandlerFactory instance that has access to the enumeration-context and items of each WinRM response. """ parser = sax.make_parser() parser.setFeature(sax.handler.feature_namespaces, True) text_buffer = TextBufferingContentHandler() factory = EnvelopeHandlerFactory(text_buffer) content_handler = ChainingContentHandler([ text_buffer, DispatchingContentHandler(factory)]) parser.setContentHandler(content_handler) return parser, factory class SaxResponseHandler(object): """ The default response handler. """ def __init__(self, sender): self._sender = sender @defer.inlineCallbacks def handle_response(self, response): """ Given a Twisted response object, parse it and return the enumeration-context and items. """ parser, factory = create_parser_and_factory() proto = ParserFeedingProtocol(parser, self._sender) response.deliverBody(proto) yield proto.d defer.returnValue((factory.enumeration_context, factory.items)) def safe_lower_equals(left, right): """ Determine case-insensitive equality while checking for Nones. """ left_l, right_l = [None if s is None else s.lower() for s in left, right] return left_l == right_l class TagComparer(object): """ Compares namespaced XML tags. """ def __init__(self, uri, localname): self.uri = uri self.localname = localname def matches(self, uri, localname): """ Does this tag match the uri/localname passed in? """ return safe_lower_equals(self.uri, uri) \ and safe_lower_equals(self.localname, localname) def __repr__(self): return str((self.uri, self.localname)) def create_tag_comparer(name): """ Construct a TagComparer instance given a uri/localname pair """ uri, localname = name return TagComparer(uri, localname) class ChainingProtocol(Protocol): """ A Twisted Protocol that dispatches calls to all the sub-protocols in its chain. """ def __init__(self, chain): self._chain = chain self.d = defer.DeferredList([p.d for p in chain]) def dataReceived(self, data): """ Called from Twisted when data is received. """ for protocol in self._chain: protocol.dataReceived(data) def connectionLost(self, reason): """ Called from Twisted indicating that dataReceived has been called for the last time. """ for protocol in self._chain: protocol.connectionLost(reason) class ParserFeedingProtocol(Protocol): """ A Twisted Protocol that feeds an XML parser as data is received. """ def __init__(self, xml_parser, sender): self._xml_parser = xml_parser self.d = defer.Deferred() self._debug_data = '' self._sender = sender self._data = [] def dataReceived(self, data): """ Called from Twisted when data is received. """ if self._sender.is_kerberos(): self._data.append(data) return if log.isEnabledFor(logging.DEBUG): self._debug_data += data log.debug("ParserFeedingProtocol dataReceived {0}" .format(data)) self._xml_parser.feed(data) def connectionLost(self, reason): """ Called from Twisted indicating that dataReceived has been called for the last time. """ if self._sender.is_kerberos(): # Decrypt data first data = self._sender.decrypt_body(''.join(self._data)) self._debug_data = data try: self._xml_parser.feed(data) except Exception: raise Exception('Could not parse SOAP message: {}'.format(data)) if self._debug_data and log.isEnabledFor(logging.DEBUG): try: import xml.dom.minidom xml = xml.dom.minidom.parseString(self._debug_data) log.debug(xml.toprettyxml()) except Exception: log.debug('Could not prettify response XML: "{0}"' .format(self._debug_data)) if isinstance(reason.value, ResponseFailed): log.error("Connection lost: {0}".format(reason.value.reasons[0])) self.d.callback(None) class ChainingContentHandler(sax.handler.ContentHandler): """ A SAX content handler that dispatches the SAX callbacks to each of the sub-handlers in its chain. """ def __init__(self, chain): self._chain = chain def startElementNS(self, name, qname, attrs): """ A SAX callback indicating the start of an element. Includes namespace information. """ for handler in self._chain: handler.startElementNS(name, qname, attrs) def endElementNS(self, name, qname): """ A SAX callback indicating the end of an element. Includes namespace information. """ for handler in self._chain: handler.endElementNS(name, qname) def characters(self, content): """ A SAX callback indicating characters from the text portion of the current XML element. """ for handler in self._chain: handler.characters(content) class TextBufferingContentHandler(sax.handler.ContentHandler): """ Keeps track of the text in the current XML element. """ def __init__(self): self._buffer = StringIO() self._text = None @property def text(self): """ Read-only access to the current element's text. """ return self._text def startElementNS(self, name, qname, attrs): """ A SAX callback indicating the start of an element. Includes namespace information. This implementation resets and truncates the buffer. """ self._reset_truncate() def endElementNS(self, name, qname): """ A SAX callback indicating the end of an element. Includes namespace information. This implementation saves the text from the buffer. Then it resets and truncates the buffer. """ self._text = self._buffer.getvalue() self._reset_truncate() def characters(self, content): """ A SAX callback indicating characters from the text portion of the current XML element. This implementation writes to the buffer. """ self._buffer.write(content) def _reset_truncate(self): self._buffer.reset() self._buffer.truncate() class DispatchingContentHandler(sax.handler.ContentHandler): """ A SAX content handler that dispatches the SAX parsing callbacks to sub-handlers based on the tag. It only looks for a sub-handler if one isn't already active. The subhandler remains active until the tag which made it active is closed. """ def __init__(self, subhandler_factory): self._subhandler_factory = subhandler_factory self._subhandler_tag = None self._subhandler = None def startElementNS(self, name, qname, attrs): """ A SAX callback indicating the start of an element. Includes namespace information. This implementation dispatches to the sub-handler based on the tag. """ log.debug('DispatchingContentHandler startElementNS {0} {1} {2}' .format(name, self._subhandler, self._subhandler_tag)) if self._subhandler is None: self._subhandler, tag = self._get_subhandler_for(name) if self._subhandler is not None: self._subhandler_tag = tag log.debug('new subhandler {0} {1}' .format(self._subhandler, self._subhandler_tag)) if self._subhandler is not None: self._subhandler.startElementNS(name, qname, attrs) def endElementNS(self, name, qname): """ A SAX callback indicating the end of an element. Includes namespace information. This implementation dispatches to the sub-handler based on the tag. """ log.debug('DispatchingContentHandler endElementNS {0} {1}' .format(name, self._subhandler)) if self._subhandler is not None: self._subhandler.endElementNS(name, qname) if self._subhandler_tag is not None: uri, localname = name if self._subhandler_tag.matches(uri, localname): self._subhandler_tag = None self._subhandler = None log.debug('removed subhandler') def _get_subhandler_for(self, name): tag = create_tag_comparer(name) return self._subhandler_factory.get_handler_for(tag), tag def is_end_of_sequence(tag): """ Is this tag an enumeration end-of-sequence tag. The namespace varies between 'select *' queries and queries that explicitly list properties. """ return tag.matches(c.XML_NS_ENUMERATION, c.WSENUM_END_OF_SEQUENCE) \ or tag.matches(c.XML_NS_WS_MAN, c.WSENUM_END_OF_SEQUENCE) class EnvelopeHandlerFactory(object): """ Supplies enumeration-context and items sub-handlers to the dispatching handler. """ def __init__(self, text_buffer): self._enumerate_handler = EnumerateContentHandler(text_buffer) self._items_handler = ItemsContentHandler(text_buffer) @property def enumeration_context(self): """ Read-only access to the enumeration context. Returns None if the response indicated end-of-sequence. """ return self._enumerate_handler.enumeration_context @property def items(self): """ The items found in the WinRM response. """ return self._items_handler.items def get_handler_for(self, tag): """ Return the subhandler that should be activated for the given XML tag. """ handler = None if tag.matches(c.XML_NS_ENUMERATION, c.WSENUM_ENUMERATION_CONTEXT) \ or is_end_of_sequence(tag): handler = self._enumerate_handler elif tag.matches(c.XML_NS_WS_MAN, c.WSENUM_ITEMS) \ or tag.matches(c.XML_NS_ENUMERATION, c.WSENUM_ITEMS): handler = self._items_handler log.debug('EnvelopeHandlerFactory get_handler_for {0} {1}' .format(tag, handler)) return handler class EnumerateContentHandler(sax.handler.ContentHandler): """ A SAX content handler that keeps track of the enumeration-context and end-of-sequence elements in a WinRM response. """ def __init__(self, text_buffer): self._text_buffer = text_buffer self._enumeration_context = None self._end_of_sequence = False @property def enumeration_context(self): """ Read-only access to the enumeration context. Returns None if the response indicated end-of-sequence. """ if not self._end_of_sequence: return self._enumeration_context def endElementNS(self, name, qname): """ A SAX callback indicating the end of an element. Includes namespace information. This implementation records the enumeration-context and end-of-sequence values. """ tag = create_tag_comparer(name) if tag.matches(c.XML_NS_ENUMERATION, c.WSENUM_ENUMERATION_CONTEXT): self._enumeration_context = self._text_buffer.text if is_end_of_sequence(tag): self._end_of_sequence = True class AddPropertyWithoutItemError(Exception): """ Raised when add_property is called before new_item on a ItemsAccumulator. """ def __init__(self, msg): Exception.__init__(self, "It is an illegal state for add_property to " "be called before the first call to new_item." " {0}".format(msg)) class Item(object): """ A flexible object for storing the properties of the items returned by a WQL query. """ def __repr__(self): return '\n' + pformat(vars(self), indent=4) class ItemsAccumulator(object): """ new_item() is called each time a new item is recognized in the enumerate and pull responses. add_property(name, value) is called with each property. All properties added between calls to new_item belong to a single item. It is an illegal state for add_property to be called before the first call to new_item. add_property being called multiple times with the same name within the same item indicates that the property is an array. """ def __init__(self): self._items = [] @property def items(self): """ The items contained in the response. """ return self._items def new_item(self): """ Indicates that a new item was recognized in the response XML. Subsequent calls to add_property belong to this item. """ self._items.append(Item()) def add_property(self, name, value): """ Add a property to the current item. Includes special handling for array types. """ if not self._items: raise AddPropertyWithoutItemError( "{0} = {1}".format(name, value)) item = self._items[-1] prop = getattr(item, name, _MARKER) if prop is _MARKER: setattr(item, name, value) return if isinstance(prop, list): prop.append(value) return setattr(item, name, [prop, value]) class TagStackStateError(Exception): """ Raised when the ItemsContentHandler tag stack is in an illegal state. This would indicate a bug, because the SAX handler will catch problems in the XML document. """ pass class ItemsContentHandler(sax.handler.ContentHandler): """ A SAX content handler that handles the list of items in the WinRM response. For the most part the tag's localname is the property name and the element's text is the value. Special handling is necessary for dates and nils. Basically the XML handled by this class looks like <(Win32_*|XmlFragment)> value value value1 value2 """ def __init__(self, text_buffer): self._text_buffer = text_buffer self._accumulator = ItemsAccumulator() self._tag_stack = deque() self._value = None @property def items(self): """ The list of items from the WinRM enumerate response. """ return self._accumulator.items def startElementNS(self, name, qname, attrs): """ A SAX callback indicating the start of an element. Includes namespace information. This instance manipulates the tag stack, creating a new instance if it's length is 1. Saves value as None if the nil attribute is present. """ log.debug('ItemsContentHandler startElementNS {0} v="{1}" t="{2}" {3}' .format(name, self._value, self._text_buffer.text, self._tag_stack)) tag = create_tag_comparer(name) if len(self._tag_stack) > 3: raise Exception("tag stack too long: {0} {1}" .format([t.localname for t in self._tag_stack], tag.localname)) if len(self._tag_stack) == 1: self._accumulator.new_item() elif len(self._tag_stack) == 2: if attrs.get((c.XML_NS_BUILTIN, c.BUILTIN_NIL), None) == 'true': self._value = (None,) self._tag_stack.append(tag) def endElementNS(self, name, qname): """ A SAX callback indicating the end of an element. Includes namespace information. This instance adds properties to the item accumulator depending on the length of the tag stack. If the length of the tag stack is 3 it parses the text as a date and saves it for later use when the properties element is closed. """ log.debug('ItemsContentHandler endElementNS {0} v="{1}" t="{2}" {3}' .format(name, self._value, self._text_buffer.text, self._tag_stack)) tag = create_tag_comparer(name) popped_tag = self._tag_stack.pop() if not popped_tag.matches(tag.uri, tag.localname): raise TagStackStateError( "End of {0} when expecting {1}" .format(tag.localname, popped_tag.localname)) log.debug("ItemsContentHandler endElementNS tag_stack: {0}" .format(self._tag_stack)) if len(self._tag_stack) == 2: if self._value is None: value = self._text_buffer.text else: value = self._value[0] self._accumulator.add_property(tag.localname, value) self._value = None elif len(self._tag_stack) == 3: if tag.matches(c.XML_NS_CIM_SCHEMA, "Datetime") \ or tag.matches(None, "Datetime"): self._value = (get_datetime(self._text_buffer.text),) txwinrm-1.2.7/txwinrm/genkrb5conf.py000066400000000000000000000041101305406262000175100ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import sys import socket import uuid from argparse import ArgumentParser TEMPLATE = """ [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = {realm} dns_lookup_realm = false dns_lookup_kdc = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = true [realms] {realm} = {{ kdc = {domain_controller_ip} admin_server = {domain_controller_ip} }} [domain_realm] .{domain} = {realm} {domain} = {realm} """ def _parse_args(): parser = ArgumentParser() parser.add_argument( "domain", help="The name of the Windows domain") parser.add_argument( "domain_controller_ip", help="The IP address of the Domain Controller") parser.add_argument( "--output", "-o", default="/etc/krb5.conf", help="Path to the krb5.conf file") return parser.parse_args() def main(): args = _parse_args() try: socket.inet_aton(args.domain_controller_ip) except socket.error: print >>sys.stderr, "ERROR: {0} is not a valid IP address".format( args.domain_controller_ip) existing_content = None try: with open(args.output) as f: existing_content = f.read() except IOError: pass if existing_content is not None: backup_file = '{0}-genkrb5conf-{1}'.format(args.output, uuid.uuid4()) with open(backup_file, 'w') as f: f.write(existing_content) with open(args.output, 'w') as f: f.write(TEMPLATE.format( domain=args.domain.lower(), realm=args.domain.upper(), domain_controller_ip=args.domain_controller_ip)) if __name__ == '__main__': main() txwinrm-1.2.7/txwinrm/krb5.py000066400000000000000000000272341305406262000161640ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in # License.zenoss under the directory where your Zenoss product is installed. # ############################################################################## import logging import collections import os import re from twisted.internet import defer, reactor from twisted.internet.protocol import ProcessProtocol LOG = logging.getLogger('txwinrm.krb5') __all__ = [ 'kinit', 'ccname', ] KRB5_CONF_TEMPLATE = ( "# This file is managed by the txwinrm python module.\n" "# NOTE: Any changes to the logging, libdefaults, domain_realm" "# sections of this file will be overwritten.\n" "#\n" "\n" "{includedir}\n" "[logging]\n" " default = FILE:/var/log/krb5libs.log\n" " kdc = FILE:/var/log/krb5kdc.log\n" " admin_server = FILE:/var/log/kadmind.log\n" "\n" "[libdefaults]\n" " default_realm = EXAMPLE.COM\n" " dns_lookup_realm = false\n" " dns_lookup_kdc = false\n" " ticket_lifetime = 24h\n" " renew_lifetime = 7d\n" " forwardable = true\n" "\n" "[realms]\n" "{realms_text}" "\n" "[domain_realm]\n" "{domain_realm_text}" ) INCLUDEDIR_TEMPLATE = ( "includedir {includedir}\n" ) KDC_TEMPLATE = ( " kdc = {kdc}" ) REALM_TEMPLATE = ( " {realm} = {{\n" "{kdcs}\n" " admin_server = {admin_server}\n" " }}\n" ) DOMAIN_REALM_TEMPLATE = ( " .{domain} = {realm}\n" " {domain} = {realm}\n" ) class KlistProcessProtocol(ProcessProtocol): """Communicates with klist command. This is only to verify the includedir. If there's an error or specific text we'll discard the includedir """ def __init__(self): self.d = defer.Deferred() self._error = '' def errReceived(self, data): if 'Included profile file could not be read while initializing krb5' in data: self._error = data def processEnded(self, reason): self.d.callback(self._error if self._error else None) class Config(object): """Manages KRB5_CONFIG.""" def __init__(self): """Initialize instance with data from KRB5_CONFIG.""" self.path = self.get_path() self.includedirs = set() self.realms, self.admin_servers = self.load() # For further usage by kerberos python module. os.environ['KRB5_CONFIG'] = self.path @defer.inlineCallbacks def add_includedir(self, includedir): if includedir in self.includedirs: return self.includedirs.add(includedir) self.save() # test for valid directory klist = None for path in ('/usr/bin/klist', '/usr/kerberos/bin/klist'): if os.path.isfile(path): klist = path break klist_args = [klist] klist_env = { 'KRB5_CONFIG': self.path, } protocol = KlistProcessProtocol() reactor.spawnProcess(protocol, klist, klist_args, klist_env) results = yield protocol.d if results: self.includedirs.discard(includedir) self.save() defer.returnValue(None) def add_kdc(self, realm, kdcs): """Add realm and KDC to KRB5_CONFIG. Allow for comma separated string of kdcs with regex Use + or nothing to add, - to remove, * for admin_server Assume first entry to be the admin_server if not specified Example: '10.10.10.10,*10.10.10.20, +10.10.10.30, -10.10.10.40' 10.10.10.10 is a kdc, add it 10.10.10.20 is a kdc and admin_server 10.10.10.30 is a kdc, add it 10.10.10.40 is no longer a kdc or was mistyped, remove it """ if not kdcs or not kdcs.strip(): return valid_kdcs = [] remove_kdcs = [] admin_server = None for kdc in kdcs.split(','): kdc = kdc.strip() match = re.match('^([\+\-\*])(.*)', kdc) if match and match.group(1) == '+': valid_kdcs.append(match.group(2).strip()) elif match and match.group(1) == '-': remove_kdcs.append(match.group(2).strip()) elif match and match.group(1) == '*': admin_server = match.group(2).strip() valid_kdcs.append(admin_server) elif kdc: valid_kdcs.append(kdc) if not admin_server and valid_kdcs: admin_server = valid_kdcs[0] new_kdcs = self.realms[realm].symmetric_difference(set(valid_kdcs)) bad_kdcs = self.realms[realm].intersection(set(remove_kdcs)) if not new_kdcs and not bad_kdcs and admin_server == self.admin_servers[realm]: # nothing to do return self.realms[realm] = self.realms[realm].union(new_kdcs) - bad_kdcs self.admin_servers[realm] = admin_server self.save() def get_path(self): """Return the path to krb5.conf. Order of preference: 1. $KRB5_CONFIG 2. $ZENHOME/var/krb5.conf 3. $HOME/.txwinrm/krb5.conf 4. /etc/krb5.conf """ if 'KRB5_CONFIG' in os.environ: return os.environ['KRB5_CONFIG'] if 'ZENHOME' in os.environ: return os.path.join(os.environ['ZENHOME'], 'var', 'krb5.conf') if 'HOME' in os.environ: return os.path.join(os.environ['HOME'], '.txwinrm', 'krb5.conf') return os.path.join('/etc', 'krb5.conf') def get_ccname(self, username): """Return KRB5CCNAME environment for username. We use a separate credential cache for each username because kinit causes all previous credentials to be destroyed when a new one is initialized. https://groups.google.com/forum/#!topic/comp.protocols.kerberos/IjtK9Mo39qc """ if 'ZENHOME' in os.environ: return os.path.join( os.environ['ZENHOME'], 'var', 'krb5cc', username) if 'HOME' in os.environ: return os.path.join( os.environ['HOME'], '.txwinrm', 'krb5cc', username) return '' def load(self): """Load current realms from KRB5_CONFIG file.""" realm_kdcs = collections.defaultdict(set) realm_adminservers = {} if not self.includedirs: self.includedirs = set() if not os.path.isfile(self.path): return realm_kdcs, realm_adminservers with open(self.path, 'r') as krb5_conf: in_realms_section = False in_realm = None for line in krb5_conf: if line.strip().startswith('[realms]'): in_realms_section = True elif line.strip().startswith('['): in_realms_section = False elif line.strip().startswith('includedir'): match = re.search(r'includedir (\S+)', line) if match: self.includedirs.add(match.group(1)) elif in_realms_section: line = line.strip() if not line: continue match = re.search(r'(\S+)\s+=\s+{', line) if match: in_realm = match.group(1) continue if in_realm: match = re.search(r'kdc\s+=\s+(\S+)', line) if match: realm_kdcs[in_realm].add(match.group(1)) match = re.search(r'admin_server\s+=\s+(\S+)', line) if match: realm_adminservers[in_realm] = match.group(1) return realm_kdcs, realm_adminservers def save(self): """Save current realm KDCs to KRB5_CONFIG.""" realms_list = [] domain_realm_list = [] includedir_list = [] for realm, kdcs in self.realms.iteritems(): if not kdcs: continue kdc_list = [] for kdc in kdcs: kdc_list.append(KDC_TEMPLATE.format(kdc=kdc)) realms_list.append( REALM_TEMPLATE.format( realm=realm.upper(), kdcs='\n'.join(kdc_list), admin_server=self.admin_servers[realm.upper()])) domain_realm_list.append( DOMAIN_REALM_TEMPLATE.format( domain=realm.lower(), realm=realm.upper())) dirname = os.path.dirname(self.path) if not os.path.isdir(dirname): os.makedirs(dirname) # create config dir for user supplied options includedir = os.path.join(dirname, 'config') if not os.path.isdir(includedir): os.makedirs(includedir) self.includedirs.add(includedir) for includedir in tuple(self.includedirs): includedir_list.append( INCLUDEDIR_TEMPLATE.format( includedir=includedir)) with open(self.path, 'w') as krb5_conf: krb5_conf.write( KRB5_CONF_TEMPLATE.format( includedir=''.join(includedir_list), realms_text=''.join(realms_list), domain_realm_text=''.join(domain_realm_list))) # Singleton. Loads from KRB5_CONFIG on import. config = Config() class KinitProcessProtocol(ProcessProtocol): """Communicates with kinit command. The only thing we do is answer the password prompt. We don't even care about the output. """ def __init__(self, password): self._password = password self.d = defer.Deferred() self._data = '' self._error = '' def errReceived(self, data): self._error += data def outReceived(self, data): self._data += data if 'Password for' in self._data and ':' in self._data: self.transport.write('{0}\n'.format(self._password)) self._data = '' elif 'Password expired' in data: # strip off '\nEnter new password:' self._error = data.split('\n')[0] self.transport.signalProcess('KILL') def processEnded(self, reason): self.d.callback(self._error if self._error else None) @defer.inlineCallbacks def kinit(username, password, kdc, includedir=None): """Perform kerberos initialization.""" kinit = None for path in ('/usr/bin/kinit', '/usr/kerberos/bin/kinit'): if os.path.isfile(path): kinit = path break if not kinit: raise Exception("krb5-workstation is not installed") try: user, realm = username.split('@') except ValueError: raise Exception("kerberos username must be in user@domain format") realm = realm.upper() global config if includedir: yield config.add_includedir(includedir) config.add_kdc(realm, kdc) ccname = config.get_ccname(username) dirname = os.path.dirname(ccname) if not os.path.isdir(dirname): os.makedirs(dirname) kinit_args = [kinit, '{}@{}'.format(user, realm)] kinit_env = { 'KRB5_CONFIG': config.path, 'KRB5CCNAME': ccname, } protocol = KinitProcessProtocol(password) reactor.spawnProcess(protocol, kinit, kinit_args, kinit_env) results = yield protocol.d defer.returnValue(results) def ccname(username): """Return KRB5CCNAME value for username.""" return config.get_ccname(username) def add_trusted_realm(realm, kdc): """Add a trusted realm for cross realm authentication""" trusted_realm = realm.upper() global config config.add_kdc(trusted_realm, kdc) txwinrm-1.2.7/txwinrm/request/000077500000000000000000000000001305406262000164275ustar00rootroot00000000000000txwinrm-1.2.7/txwinrm/request/__init__.py000066400000000000000000000000001305406262000205260ustar00rootroot00000000000000txwinrm-1.2.7/txwinrm/request/command.xml000077500000000000000000000026161305406262000205770ustar00rootroot00000000000000 http://gilroy:5985/wsman http://schemas.microsoft.com/wbem/wsman/1/windows/shell/cmd http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous http://schemas.microsoft.com/wbem/wsman/1/windows/shell/Command {envelope_size} uuid:799002D6-F3D9-4CAF-968F-D2802410148F {shell_id} TRUE PT{timeout}.000S {command_line_elem} txwinrm-1.2.7/txwinrm/request/create.xml000077500000000000000000000030411305406262000204150ustar00rootroot00000000000000 http://gilroy:5985/wsman http://schemas.microsoft.com/wbem/wsman/1/windows/shell/cmd http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous http://schemas.xmlsoap.org/ws/2004/09/transfer/Create {envelope_size} uuid:D515053B-134D-4B63-9DA9-6FA9C520A6B4 FALSE {code_page} PT60.000S stdin stdout stderr txwinrm-1.2.7/txwinrm/request/delete.xml000077500000000000000000000025311305406262000204170ustar00rootroot00000000000000 http://gilroy:5985/wsman http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous http://schemas.xmlsoap.org/ws/2004/09/transfer/Delete {envelope_size} uuid:EEA0F479-EC1D-4908-BAAF-B023103E5DDB http://schemas.microsoft.com/wbem/wsman/1/windows/shell/cmd {shell_id} PT60.000S txwinrm-1.2.7/txwinrm/request/enumerate.xml000077500000000000000000000023131305406262000211400ustar00rootroot00000000000000 http://103040106:5985/wsman {resource_uri} http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous http://schemas.xmlsoap.org/ws/2004/09/enumeration/Enumerate {envelope_size} uuid:55F28C75-F63E-4F68-8360-A8C478003959 PT60.000S 32000 {wql} txwinrm-1.2.7/txwinrm/request/event_pull.xml000077500000000000000000000033341305406262000213340ustar00rootroot00000000000000 http://gilroy:5985/wsman http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous http://schemas.xmlsoap.org/ws/2004/09/enumeration/Pull {envelope_size} uuid:DC17922E-EBE7-4333-B92A-7157EB372F33 ZenossSubscription RenderedText PT5.000S {enumeration_context} 32000 txwinrm-1.2.7/txwinrm/request/pull.xml000077500000000000000000000023021305406262000201250ustar00rootroot00000000000000 http://103040106:5985/wsman {resource_uri} http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous http://schemas.xmlsoap.org/ws/2004/09/enumeration/Pull {envelope_size} uuid:578DC055-B6C4-4387-B39F-E992D0ED76A0 PT60.000S {enumeration_context} 32000 txwinrm-1.2.7/txwinrm/request/receive.xml000077500000000000000000000030751305406262000206030ustar00rootroot00000000000000 http://gilroy:5985/wsman http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous http://schemas.microsoft.com/wbem/wsman/1/windows/shell/Receive {envelope_size} uuid:D40A0940-F00D-4E7A-9DB2-D668853DC958 http://schemas.microsoft.com/wbem/wsman/1/windows/shell/cmd {shell_id} PT60.000S stdout stderr txwinrm-1.2.7/txwinrm/request/send.xml000077500000000000000000000030551305406262000201100ustar00rootroot00000000000000 http://gilroy:5985/wsman http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous http://schemas.microsoft.com/wbem/wsman/1/windows/shell/Send {envelope_size} uuid:5F28DC8E-A7AA-46F0-8AAC-727C1CF85D1B http://schemas.microsoft.com/wbem/wsman/1/windows/shell/cmd {shell_id} PT60.000S {base64_encoded_command} txwinrm-1.2.7/txwinrm/request/signal.xml000077500000000000000000000030311305406262000204260ustar00rootroot00000000000000 http://gilroy:5985/wsman http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous http://schemas.microsoft.com/wbem/wsman/1/windows/shell/Signal {envelope_size} uuid:9EE2148F-83C8-462E-8323-0B46F34951CE http://schemas.microsoft.com/wbem/wsman/1/windows/shell/cmd {shell_id} PT60.000S {signal_code} txwinrm-1.2.7/txwinrm/request/subscribe.xml000077500000000000000000000041421305406262000211360ustar00rootroot00000000000000 http://gilroy:5985/wsman http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous http://schemas.xmlsoap.org/ws/2004/08/eventing/Subscribe {envelope_size} uuid:40E5E215-9AE6-4BB2-BF59-5BE542B6E67B ZenossSubscription RenderedText PT60.000S PT5.000S UTF-8 PT3759670629.777S {event_query} txwinrm-1.2.7/txwinrm/request/unsubscribe.xml000077500000000000000000000032531305406262000215030ustar00rootroot00000000000000 http://gilroy:5985/wsman http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous http://schemas.xmlsoap.org/ws/2004/08/eventing/Unsubscribe {envelope_size} uuid:2A0865D5-CA69-4CEC-A9BB-CAAF455DF2AE ZenossSubscription RenderedText PT5.000S http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog {subscription_id} txwinrm-1.2.7/txwinrm/shell.py000066400000000000000000000400741305406262000164250ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import re import logging import shlex import base64 import csv from itertools import izip from pprint import pformat from cStringIO import StringIO from twisted.internet import reactor, defer, task from twisted.internet.error import TimeoutError from xml.etree import cElementTree as ET from . import constants as c from .util import create_etree_request_sender, get_datetime log = logging.getLogger('winrm') _MAX_REQUESTS_PER_COMMAND = 9999 class CommandResponse(object): def __init__(self, stdout, stderr, exit_code): self._stdout = stdout self._stderr = stderr self._exit_code = exit_code @property def stdout(self): return self._stdout @property def stderr(self): return self._stderr @property def exit_code(self): return self._exit_code def __repr__(self): return pformat(dict( stdout=self.stdout, stderr=self.stderr, exit_code=self.exit_code)) def _build_command_line_elem(command_line): command_line_parts = shlex.split(command_line, posix=False) prefix = "rsp" ET.register_namespace(prefix, c.XML_NS_MSRSP) command_line_elem = ET.Element('{%s}CommandLine' % c.XML_NS_MSRSP) command_elem = ET.Element('{%s}Command' % c.XML_NS_MSRSP) command_elem.text = command_line_parts[0] command_line_elem.append(command_elem) for arguments_text in command_line_parts[1:]: arguments_elem = ET.Element('{%s}Arguments' % c.XML_NS_MSRSP) arguments_elem.text = arguments_text command_line_elem.append(arguments_elem) tree = ET.ElementTree(command_line_elem) str_io = StringIO() tree.write(str_io, encoding='utf-8') return str_io.getvalue() def _stripped_lines(stream_parts): results = [] for line in ''.join(stream_parts).splitlines(): if line.strip(): results.append(line.strip()) return results def _find_shell_id(elem): xpath = './/{%s}Selector[@Name="ShellId"]' % c.XML_NS_WS_MAN return elem.findtext(xpath).strip() def _find_command_id(elem): xpath = './/{%s}CommandId' % c.XML_NS_MSRSP return elem.findtext(xpath).strip() def _find_stream(elem, command_id, stream_name): xpath = './/{%s}Stream[@Name="%s"][@CommandId="%s"]' \ % (c.XML_NS_MSRSP, stream_name, command_id) for elem in elem.findall(xpath): if elem.text is not None: yield base64.decodestring(elem.text).decode('utf-8-sig') def _find_exit_code(elem, command_id): command_state_xpath = './/{%s}CommandState[@CommandId="%s"]' \ % (c.XML_NS_MSRSP, command_id) command_state_elem = elem.find(command_state_xpath) if command_state_elem is not None: exit_code_xpath = './/{%s}ExitCode' % c.XML_NS_MSRSP exit_code_text = command_state_elem.findtext(exit_code_xpath) return None if exit_code_text is None else int(exit_code_text) class SingleShotCommand(object): def __init__(self, sender): self._sender = sender @defer.inlineCallbacks def run_command(self, command_line): """ Run commands in a remote shell like the winrs application on Windows. Accepts multiple commands. Returns a dictionary with the following structure: CommandResponse .stdout = [, ...] .stderr = [, ...] .exit_code = """ shell_id = yield self._create_shell() try: cmd_response = yield self._run_command(shell_id, command_line) except TimeoutError: yield self._sender.close_connections() yield self._delete_shell(shell_id) yield self._sender.close_connections() defer.returnValue(cmd_response) @defer.inlineCallbacks def _create_shell(self): elem = yield self._sender.send_request('create') defer.returnValue(_find_shell_id(elem)) @defer.inlineCallbacks def _run_command(self, shell_id, command_line): command_line_elem = _build_command_line_elem(command_line) command_elem = yield self._sender.send_request( 'command', shell_id=shell_id, command_line_elem=command_line_elem, timeout=self._sender._sender._conn_info.timeout) command_id = _find_command_id(command_elem) stdout_parts = [] stderr_parts = [] for i in xrange(_MAX_REQUESTS_PER_COMMAND): receive_elem = yield self._sender.send_request( 'receive', shell_id=shell_id, command_id=command_id) stdout_parts.extend( _find_stream(receive_elem, command_id, 'stdout')) stderr_parts.extend( _find_stream(receive_elem, command_id, 'stderr')) exit_code = _find_exit_code(receive_elem, command_id) if exit_code is not None: break else: raise Exception("Reached max requests per command.") yield self._sender.send_request( 'signal', shell_id=shell_id, command_id=command_id, signal_code=c.SHELL_SIGNAL_TERMINATE) stdout = _stripped_lines(stdout_parts) stderr = _stripped_lines(stderr_parts) defer.returnValue(CommandResponse(stdout, stderr, exit_code)) @defer.inlineCallbacks def _delete_shell(self, shell_id): yield self._sender.send_request('delete', shell_id=shell_id) def create_single_shot_command(conn_info): sender = create_etree_request_sender(conn_info) return SingleShotCommand(sender) class LongRunningCommand(object): def __init__(self, sender): self._sender = sender self._shell_id = None self._command_id = None self._exit_code = None @defer.inlineCallbacks def start(self, command_line): log.debug("LongRunningCommand run_command: {0}".format(command_line)) elem = yield self._sender.send_request('create') self._shell_id = _find_shell_id(elem) command_line_elem = _build_command_line_elem(command_line) log.debug('LongRunningCommand run_command: sending command request ' '(shell_id={0}, command_line_elem={1})'.format( self._shell_id, command_line_elem)) try: command_elem = yield self._sender.send_request( 'command', shell_id=self._shell_id, command_line_elem=command_line_elem, timeout=self._sender._sender._conn_info.timeout) except TimeoutError: yield self._sender.close_connections() raise self._command_id = _find_command_id(command_elem) @defer.inlineCallbacks def receive(self): try: receive_elem = yield self._sender.send_request( 'receive', shell_id=self._shell_id, command_id=self._command_id) except TimeoutError: yield self._sender.close_connections() raise stdout_parts = _find_stream(receive_elem, self._command_id, 'stdout') stderr_parts = _find_stream(receive_elem, self._command_id, 'stderr') self._exit_code = _find_exit_code(receive_elem, self._command_id) stdout = _stripped_lines(stdout_parts) stderr = _stripped_lines(stderr_parts) defer.returnValue((stdout, stderr)) @defer.inlineCallbacks def stop(self): yield self._sender.send_request( 'signal', shell_id=self._shell_id, command_id=self._command_id, signal_code=c.SHELL_SIGNAL_CTRL_C) try: stdout, stderr = yield self.receive() except TimeoutError: # close_connections done in receive() pass yield self._sender.send_request( 'signal', shell_id=self._shell_id, command_id=self._command_id, signal_code=c.SHELL_SIGNAL_TERMINATE) yield self._sender.send_request('delete', shell_id=self._shell_id) defer.returnValue(CommandResponse(stdout, stderr, self._exit_code)) def create_long_running_command(conn_info): sender = create_etree_request_sender(conn_info) return LongRunningCommand(sender) @defer.inlineCallbacks def create_long_running_shell(conn_info): results = {} sender = create_etree_request_sender(conn_info) elem = yield sender.send_request('create') shell_id = _find_shell_id(elem) results['sender'] = sender results['shell_id'] = shell_id defer.returnValue(results) @defer.inlineCallbacks def retrieve_long_running_shell(sender, shell_id, command_line): stdout_parts = [] stderr_parts = [] exit_code = None command_line_elem = _build_command_line_elem(command_line) command_elem = yield sender.send_request( 'command', shell_id=shell_id, command_line_elem=command_line_elem) command_id = _find_command_id(command_elem) for i in xrange(3): receive_elem = yield sender.send_request( 'receive', shell_id=shell_id, command_id=command_id) stdout_parts.extend( _find_stream(receive_elem, command_id, 'stdout')) stderr_parts.extend( _find_stream(receive_elem, command_id, 'stderr')) exit_code = _find_exit_code(receive_elem, command_id) stdout = _stripped_lines(stdout_parts) stderr = _stripped_lines(stderr_parts) defer.returnValue(CommandResponse(stdout, stderr, exit_code)) class Typeperf(object): def __init__(self, long_running_command): self._long_running_command = long_running_command self._counters = None self._row_count = 0 @defer.inlineCallbacks def start(self, counters, time_between_samples=1): self._counters = counters self._row_count = 0 quoted_counters = ['"{0}"'.format(c) for c in counters] command_line = 'typeperf {0} -si {1}'.format( ' '.join(quoted_counters), time_between_samples) yield self._long_running_command.start(command_line) @defer.inlineCallbacks def receive(self): """ Returns a pair, (, ), where the dictionary is {: [(, )]}""" stdout, stderr = yield self._long_running_command.receive() dct = {} for counter in self._counters: dct[counter] = [] for row in csv.reader(stdout): self._row_count += 1 if self._row_count == 1: continue try: timestamp = get_datetime(row[0]) except ValueError as e: log.debug('Typeperf receive {0}. {1}'.format(row, e)) continue for counter, value in izip(self._counters, row[1:]): dct[counter].append((timestamp, float(value))) defer.returnValue((dct, stderr)) @defer.inlineCallbacks def stop(self): yield self._long_running_command.stop() self._counters = None self._row_count = 0 def create_typeperf(conn_info): long_running_command = create_long_running_command(conn_info) return Typeperf(long_running_command) class RemoteShell(object): _PROMPT_PATTERN = re.compile(r'[A-Z]:\\.*>$') _READ_DELAY = 0.2 def __init__(self, sender, include_exit_codes=False): self._sender = sender self._include_exit_codes = include_exit_codes self._reset() def __del__(self): self.delete() @property def prompt(self): return self._prompt @defer.inlineCallbacks def create(self): if self._shell_id is not None: self.delete() log.debug("RemoteShell create: sending create request") elem = yield self._sender.send_request('create') self._shell_id = _find_shell_id(elem) command_line_elem = _build_command_line_elem('cmd') log.debug('RemoteShell create: sending command request (shell_id={0}, ' 'command_line_elem={1})'.format( self._shell_id, command_line_elem)) command_elem = yield self._sender.send_request( 'command', shell_id=self._shell_id, command_line_elem=command_line_elem, timeout=self._sender._sender._conn_info.timeout) self._command_id = _find_command_id(command_elem) self._deferred_receiving = self._start_receiving() stdout = [] stderr = [] while self._prompt is None: out, err = yield task.deferLater( reactor, self._READ_DELAY, self._get_output) stderr.extend(err) for line in out: if self._PROMPT_PATTERN.match(line): self._prompt = line else: stdout.append(line) defer.returnValue(CommandResponse(stdout, stderr, None)) @defer.inlineCallbacks def run_command(self, command): stdout, stderr = yield self._run_command(command) if self._include_exit_codes: o2, e2 = yield self._run_command('echo %errorlevel%') exit_code = o2[0] else: exit_code = None defer.returnValue(CommandResponse(stdout, stderr, exit_code)) @defer.inlineCallbacks def delete(self): if self._shell_id is None: return self.run_command('exit') exit_code = yield self._deferred_receiving yield self._sender.send_request( 'signal', shell_id=self._shell_id, command_id=self._command_id, signal_code=c.SHELL_SIGNAL_TERMINATE) yield self._sender.send_request('delete', shell_id=self._shell_id) stdout, stderr = self._get_output() self._reset() defer.returnValue(CommandResponse(stdout, stderr, exit_code)) def _reset(self): self._shell_id = None self._command_id = None self._deferred_receiving = None self._prompt = None self._stdout_parts = [] self._stderr_parts = [] @defer.inlineCallbacks def _start_receiving(self): exit_code = None while exit_code is None: receive_elem = yield task.deferLater( reactor, self._READ_DELAY, self._sender.send_request, 'receive', shell_id=self._shell_id, command_id=self._command_id) self._stdout_parts.extend( _find_stream(receive_elem, self._command_id, 'stdout')) self._stderr_parts.extend( _find_stream(receive_elem, self._command_id, 'stderr')) exit_code = _find_exit_code(receive_elem, self._command_id) defer.returnValue(exit_code) def _get_output(self): stdout = _stripped_lines(self._stdout_parts) stderr = _stripped_lines(self._stderr_parts) del self._stdout_parts[:] del self._stderr_parts[:] return stdout, stderr @defer.inlineCallbacks def _run_command(self, command): base64_encoded_command = base64.encodestring('{0}\r\n'.format(command)) yield self._sender.send_request( 'send', shell_id=self._shell_id, command_id=self._command_id, base64_encoded_command=base64_encoded_command) stdout = [] stderr = [] for i in xrange(_MAX_REQUESTS_PER_COMMAND): out, err = yield task.deferLater( reactor, self._READ_DELAY, self._get_output) stderr.extend(err) if not out: continue stdout.extend(out[:-1]) if out[-1] == self._prompt: break stdout.append(out[-1]) else: raise Exception("Reached max requests per command.") defer.returnValue((stdout, stderr)) def create_remote_shell(conn_info, include_exit_codes=False): sender = create_etree_request_sender(conn_info) return RemoteShell(sender, include_exit_codes) txwinrm-1.2.7/txwinrm/subscribe.py000066400000000000000000000150241305406262000172740ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import logging from collections import namedtuple from twisted.internet import defer from . import constants as c from .util import create_etree_request_sender, get_datetime log = logging.getLogger('winrm') _MAX_PULL_REQUESTS_PER_BATCH = 999999 _EVENT_QUERY_FMT = '<QueryList><Query Path="{path}">' \ '<Select>{select}</Select></Query></QueryList>' Event = namedtuple('Event', 'system data rendering_info') System = namedtuple('System', [ 'provider', 'event_id', 'event_id_qualifiers', 'level', 'task', 'keywords', 'time_created', 'event_record_id', 'channel', 'computer', 'user_id']) RenderingInfo = namedtuple('RenderingInfo', [ 'culture', 'message', 'level', 'opcode', 'keywords']) def _find_subscription_id(subscribe_resp_elem): xpath = './/{%s}Identifier' % c.XML_NS_EVENTING return subscribe_resp_elem.findtext(xpath).strip() def _find_enumeration_context(resp_elem): xpath = './/{%s}EnumerationContext' % c.XML_NS_ENUMERATION return resp_elem.findtext(xpath).strip() def _event_attr(elem, localname, attr): subelem = elem.find('.//{%s}%s' % (c.XML_NS_MSEVENT, localname)) return None if subelem is None else subelem.get(attr) def _event_text(elem, localname): text = elem.findtext('.//{%s}%s' % (c.XML_NS_MSEVENT, localname)) return None if text is None else text.strip() def _event_datetime(elem, localname, attr): date_str = _event_attr(elem, localname, attr) return get_datetime(date_str) def _event_list(elem, localname): texts = [] for e in elem.findall('.//{%s}%s' % (c.XML_NS_MSEVENT, localname)): texts.append(e.text) return texts def _safe_int(text, base=10): return None if text is None else int(text, base) def _find_events(pull_resp_elem): event_elems = pull_resp_elem.findall('.//{%s}Event' % c.XML_NS_MSEVENT) for event_elem in event_elems: system_elem = event_elem.find('.//{%s}System' % c.XML_NS_MSEVENT) ri_elem = event_elem.find('.//{%s}RenderingInfo' % c.XML_NS_MSEVENT) system = System( provider=_event_attr(system_elem, 'Provider', 'Name'), event_id=_safe_int(_event_text(system_elem, 'EventID')), event_id_qualifiers=_safe_int(_event_attr( system_elem, 'EventID', 'Qualifiers')), level=_safe_int(_event_text(system_elem, 'Level')), task=_safe_int(_event_text(system_elem, 'Task')), keywords=_safe_int(_event_text(system_elem, 'Keywords'), 16), time_created=_event_datetime( system_elem, 'TimeCreated', 'SystemTime'), event_record_id=_safe_int(_event_text( system_elem, 'EventRecordID')), channel=_event_text(system_elem, 'Channel'), computer=_event_text(system_elem, 'Computer'), user_id=_event_attr(system_elem, 'Security', 'UserID')) if ri_elem is None: rendering_info = None else: rendering_info = RenderingInfo( culture=ri_elem.get('Culture'), message=_event_text(ri_elem, 'Message'), level=_event_text(ri_elem, 'Level'), opcode=_event_text(ri_elem, 'Opcode'), keywords=_event_list(ri_elem, 'Keyword')) yield Event( system=system, data=_event_text(event_elem, 'Data'), rendering_info=rendering_info) class EventSubscription(object): def __init__(self, sender): self._sender = sender self._subscription_id = None self._enumeration_context = None @defer.inlineCallbacks def subscribe(self, path='Application', select='*'): if self._subscription_id is not None: raise Exception('You must unsubscribe first.') event_query = _EVENT_QUERY_FMT.format(path=path, select=select) resp_elem = yield self._send_subscribe(event_query) self._subscription_id = _find_subscription_id(resp_elem) self._enumeration_context = _find_enumeration_context(resp_elem) @defer.inlineCallbacks def _send_subscribe(self, event_query): resp_elem = yield self._sender.send_request( 'subscribe', event_query=event_query) defer.returnValue(resp_elem) @defer.inlineCallbacks def pull_once(self, process_event_func): if self._subscription_id is None: raise Exception('You must subscribe first.') resp_elem = yield self._send_pull(self._enumeration_context) self._enumeration_context = _find_enumeration_context(resp_elem) for event in _find_events(resp_elem): process_event_func(event) @defer.inlineCallbacks def pull(self, process_event_func): if self._subscription_id is None: raise Exception('You must subscribe first.') request_count = 0 while request_count < _MAX_PULL_REQUESTS_PER_BATCH: request_count += 1 resp_elem = yield self._send_pull(self._enumeration_context) self._enumeration_context = _find_enumeration_context(resp_elem) found_events = 0 for event in _find_events(resp_elem): found_events += 1 process_event_func(event) if not found_events: break else: raise Exception('Reached max pull requests per batch.') @defer.inlineCallbacks def _send_pull(self, enumeration_context): resp_elem = yield self._sender.send_request( 'event_pull', enumeration_context=enumeration_context) defer.returnValue(resp_elem) @defer.inlineCallbacks def unsubscribe(self): if self._subscription_id is None: return yield self._send_unsubscribe(self._subscription_id) self._subscription_id = None self._enumeration_context = None @defer.inlineCallbacks def _send_unsubscribe(self, subscription_id): resp_elem = yield self._sender.send_request( 'unsubscribe', subscription_id=subscription_id) defer.returnValue(resp_elem) def create_event_subscription(conn_info): sender = create_etree_request_sender(conn_info) return EventSubscription(sender) txwinrm-1.2.7/txwinrm/test/000077500000000000000000000000001305406262000157165ustar00rootroot00000000000000txwinrm-1.2.7/txwinrm/test/__init__.py000066400000000000000000000005341305406262000200310ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## txwinrm-1.2.7/txwinrm/test/complex000077500000000000000000000017541305406262000173220ustar00rootroot00000000000000#! /usr/bin/env python ############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import sys import os from itertools import chain from subprocess import check_output python_files = chain.from_iterable( [os.path.join(root, fname) for fname in fnames if fname.endswith('.py')] for root, dirs, fnames in os.walk('txwinrm') ) command = ['cyclic_complexity/pygenie.py', 'complexity'] command.extend(python_files) output = check_output(command) exit_code = 0 for line in output.splitlines(): line = line.strip() if not line: continue print line if line.startswith('File:') \ or line == "This code looks all good!": continue exit_code = 1 sys.exit(exit_code) txwinrm-1.2.7/txwinrm/test/cover000077500000000000000000000007171305406262000167670ustar00rootroot00000000000000#! /bin/sh ############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## coverage run --include="txwinrm/*" --omit="txwinrm/test/*" `which trial` txwinrm coverage report "$@" txwinrm-1.2.7/txwinrm/test/data/000077500000000000000000000000001305406262000166275ustar00rootroot00000000000000txwinrm-1.2.7/txwinrm/test/data/server_2003/000077500000000000000000000000001305406262000206015ustar00rootroot00000000000000txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_ComputerSystem.properties000066400000000000000000000014121305406262000267020ustar00rootroot00000000000000KeyboardPasswordStatus NumberOfProcessors PowerState PowerManagementSupported ResetCapability LastLoadInfo WakeUpType PartOfDomain SystemStartupDelay ResetLimit DomainRole CurrentTimeZone BootOptionOnWatchDog BootROMSupported Description SystemStartupOptions NameFormat ResetCount PauseAfterReset AutomaticResetCapability BootupState Manufacturer PowerOnPasswordStatus Status AdminPasswordStatus Name InstallDate AutomaticResetBootOption Caption SystemStartupSetting FrontPanelResetStatus BootOptionOnLimit Model PowerSupplyState Workgroup NetworkServerModeEnabled Domain TotalPhysicalMemory ChassisBootupState SystemType DNSHostName UserName InfraredSupported PrimaryOwnerContact Roles DaylightInEffect CreationClassName EnableDaylightSavingsTime ThermalState PrimaryOwnerName txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_ComputerSystem_all_000.xml000066400000000000000000000056331305406262000265260ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:8888DC73-AF75-4010-9965-3C9DE579BBBAhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039593truetruetrueNormal bootAMAZON-9DC6EF033Win32_ComputerSystem0AT/AT COMPATIBLEAMAZON-9DC6EF03solutions.loc3true3false3XenHVM domUAMAZON-9DC6EF03true1true-1303AMAZON1-1-1LM_WorkstationLM_ServerNTServer_NTMaster_BrowserDFSOK30"Windows Server 2003 Datacenter x64 Edition" /noexecute=optout /fastdetect /usepmtimer0x64-based PC36443008006txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_ComputerSystem_star_000.xml000066400000000000000000000063631305406262000267300ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:71BE6361-D225-4D20-871B-1A68C3195758http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039593truetruetrueNormal bootAMAZON-9DC6EF033Win32_ComputerSystem0AT/AT COMPATIBLEAMAZON-9DC6EF03solutions.loc3true3false3XenHVM domUAMAZON-9DC6EF03true1true-1303AMAZON1-1-1LM_WorkstationLM_ServerNTServer_NTMaster_BrowserDFSOK30"Windows Server 2003 Datacenter x64 Edition" /noexecute=optout /fastdetect /usepmtimer0x64-based PC36443008006txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_IP4RouteTable.properties000066400000000000000000000002321305406262000262610ustar00rootroot00000000000000Status Information NextHop Protocol Description InstallDate Metric2 Age Destination Mask InterfaceIndex Metric3 Caption Metric1 Metric5 Metric4 Type Name txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_IP4RouteTable_all_000.xml000066400000000000000000000120231305406262000260750ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:D951E961-FE65-4269-AB8B-1B3C1868043Dhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959143280.0.0.00.0.0.0 - 0.0.0.0 - 10.30.40.10.0.0.00.0655390.0.0.010-1-1-1-10.0.0.010.30.40.1341433110.30.40.010.30.40.0 - 255.255.255.0 - 10.30.40.6410.30.40.00.065539255.255.255.010-1-1-1-110.30.40.010.30.40.64231433110.30.40.6410.30.40.64 - 255.255.255.255 - 127.0.0.110.30.40.640.01255.255.255.25510-1-1-1-110.30.40.64127.0.0.1231433110.255.255.25510.255.255.255 - 255.255.255.255 - 10.30.40.6410.255.255.2550.065539255.255.255.25510-1-1-1-110.255.255.25510.30.40.642314338127.0.0.0127.0.0.0 - 255.0.0.0 - 127.0.0.1127.0.0.00.01255.0.0.01-1-1-1-1127.0.0.0127.0.0.12314331224.0.0.0224.0.0.0 - 240.0.0.0 - 10.30.40.64224.0.0.00.065539240.0.0.010-1-1-1-1224.0.0.010.30.40.642314338255.255.255.255255.255.255.255 - 255.255.255.255 - 10.30.40.64255.255.255.2550.065539255.255.255.2551-1-1-1-1255.255.255.25510.30.40.6423txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_IP4RouteTable_star_000.xml000066400000000000000000000147031305406262000263050ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:C3BB865D-8CA9-463F-94C8-C2566FDF1717http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959143280.0.0.00.0.0.0 - 0.0.0.0 - 10.30.40.10.0.0.00.0655390.0.0.010-1-1-1-10.0.0.010.30.40.1341433110.30.40.010.30.40.0 - 255.255.255.0 - 10.30.40.6410.30.40.00.065539255.255.255.010-1-1-1-110.30.40.010.30.40.64231433110.30.40.6410.30.40.64 - 255.255.255.255 - 127.0.0.110.30.40.640.01255.255.255.25510-1-1-1-110.30.40.64127.0.0.1231433110.255.255.25510.255.255.255 - 255.255.255.255 - 10.30.40.6410.255.255.2550.065539255.255.255.25510-1-1-1-110.255.255.25510.30.40.642314338127.0.0.0127.0.0.0 - 255.0.0.0 - 127.0.0.1127.0.0.00.01255.0.0.01-1-1-1-1127.0.0.0127.0.0.12314331224.0.0.0224.0.0.0 - 240.0.0.0 - 10.30.40.64224.0.0.00.065539240.0.0.010-1-1-1-1224.0.0.010.30.40.642314338255.255.255.255255.255.255.255 - 255.255.255.255 - 10.30.40.64255.255.255.2550.065539255.255.255.2551-1-1-1-1255.255.255.25510.30.40.6423txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_LogicalDisk.properties000066400000000000000000000010431305406262000260640ustar00rootroot00000000000000QuotasDisabled ProviderName PowerManagementSupported Access SystemName DriveType Status VolumeDirty PNPDeviceID Description VolumeName ConfigManagerUserConfig ErrorCleared Compressed FileSystem Purpose QuotasIncomplete Name InstallDate BlockSize MediaType Caption StatusInfo DeviceID ConfigManagerErrorCode ErrorMethodology MaximumComponentLength QuotasRebuilding SupportsFileBasedCompression NumberOfBlocks FreeSpace VolumeSerialNumber SupportsDiskQuotas ErrorDescription LastErrorCode CreationClassName Availability SystemCreationClassName Size txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_LogicalDisk_all_000.xml000066400000000000000000000072251305406262000257070ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:6FD38555-26E0-4DF5-BB53-D6C223BACD0Ehttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959C:falseWin32_LogicalDiskLocal Fixed DiskC:3NTFS1144788582425512C:truefalsefalse26841444352truetrueWin32_ComputerSystemAMAZON-9DC6EF03falseDE0A8E57D:falseWin32_LogicalDiskLocal Fixed DiskD:3NTFS5358897152025512D:truefalsefalse53683941376truetrueWin32_ComputerSystemAMAZON-9DC6EF03falseNew Volume76B9CC9Dtxwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_LogicalDisk_star_000.xml000066400000000000000000000102211305406262000260760ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:616778B5-9049-4A2F-9931-D61544B684FEhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959C:falseWin32_LogicalDiskLocal Fixed DiskC:3NTFS1144788582425512C:truefalsefalse26841444352truetrueWin32_ComputerSystemAMAZON-9DC6EF03falseDE0A8E57D:falseWin32_LogicalDiskLocal Fixed DiskD:3NTFS5358897152025512D:truefalsefalse53683941376truetrueWin32_ComputerSystemAMAZON-9DC6EF03falseNew Volume76B9CC9Dtxwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_NetworkAdapterConfiguration.properties000066400000000000000000000014771305406262000313740ustar00rootroot00000000000000DHCPLeaseObtained Index WINSEnableLMHostsLookup TcpMaxDataRetransmissions DomainDNSRegistrationEnabled DatabasePath WINSHostLookupFile IPXEnabled DHCPLeaseExpires InterfaceIndex DNSHostName TcpWindowSize Description WINSScopeID IPFilterSecurityEnabled DeadGWDetectEnabled TcpMaxConnectRetransmissions ArpAlwaysSourceRoute DHCPEnabled PMTUBHDetectEnabled DNSDomain IPXMediaType KeepAliveInterval PMTUDiscoveryEnabled MTU IPConnectionMetric SettingID ServiceName ForwardBufferMemory FullDNSRegistrationEnabled DefaultTTL TcpUseRFC1122UrgentPointer MACAddress ArpUseEtherSNAP DNSEnabledForWINSResolution Caption IPXAddress IGMPLevel NumForwardPackets KeepAliveTime IPUseZeroBroadcast TcpipNetbiosOptions WINSSecondaryServer DefaultTOS IPEnabled IPPortSecurityEnabled TcpNumConnections WINSPrimaryServer DHCPServer IPXVirtualNetNumber txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_NetworkAdapterConfiguration_all_000.xml000066400000000000000000000340301305406262000311760ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:57B26B58-0B0B-4268-99E9-09BD9A98BABDhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959[00000001] RAS Async AdapterRAS Async Adapterfalse1falsefalseAsyncMac{B1F75353-DD5A-416C-8F0F-B38105F7DDA9}[00000002] WAN Miniport (L2TP)WAN Miniport (L2TP)false2falsefalseRasl2tp{9426E609-5700-4BB3-BF5D-8E7819BF0842}[00000003] WAN Miniport (PPTP)WAN Miniport (PPTP)false3falsefalse50:50:54:50:30:30PptpMiniport{881AF600-B6F6-40B6-9C2F-FE423044861A}[00000004] WAN Miniport (PPPOE)WAN Miniport (PPPOE)false4falsefalse33:50:6F:45:30:30RasPppoe{63ED94DB-C0FE-4D12-A899-B14BF78D999F}[00000005] Direct ParallelDirect Parallelfalse5falsefalseRaspti{DFAF11BF-56E3-4D4E-AF03-BF93F69D84F7}[00000006] WAN Miniport (IP)WAN Miniport (IP)false6falsefalseNdisWan{8FA4A5B1-AD59-4AD9-A7FA-834F20AE08F5}[00000007] Citrix PV Ethernet Adapter%SystemRoot%\System32\drivers\etcCitrix PV Ethernet Adapter #0true2013-04-15T20:58:50Z2013-04-15T19:58:50Z10.30.40.1solutions.locfalseAMAZON-9DC6EF03falsetrue76553910truefalsefalse12:4A:CE:8D:C7:A4Xennet{A204115D-3898-4C28-834B-A79690BD64D2}1true10.30.1.10txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_NetworkAdapterConfiguration_star_000.xml000066400000000000000000000413771305406262000314130ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:1AE5EC41-3F99-4B20-8792-D54B82EBF311http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959[00000001] RAS Async AdapterRAS Async Adapterfalse1falsefalseAsyncMac{B1F75353-DD5A-416C-8F0F-B38105F7DDA9}[00000002] WAN Miniport (L2TP)WAN Miniport (L2TP)false2falsefalseRasl2tp{9426E609-5700-4BB3-BF5D-8E7819BF0842}[00000003] WAN Miniport (PPTP)WAN Miniport (PPTP)false3falsefalse50:50:54:50:30:30PptpMiniport{881AF600-B6F6-40B6-9C2F-FE423044861A}[00000004] WAN Miniport (PPPOE)WAN Miniport (PPPOE)false4falsefalse33:50:6F:45:30:30RasPppoe{63ED94DB-C0FE-4D12-A899-B14BF78D999F}[00000005] Direct ParallelDirect Parallelfalse5falsefalseRaspti{DFAF11BF-56E3-4D4E-AF03-BF93F69D84F7}[00000006] WAN Miniport (IP)WAN Miniport (IP)false6falsefalseNdisWan{8FA4A5B1-AD59-4AD9-A7FA-834F20AE08F5}[00000007] Citrix PV Ethernet Adapter%SystemRoot%\System32\drivers\etc10.30.40.1Citrix PV Ethernet Adapter #0true2013-04-15T20:58:50Z2013-04-15T19:58:50Z10.30.40.1solutions.locus-east-1.ec2-utilities.amazonaws.comsolutions.locfalseAMAZON-9DC6EF0310.30.1.10falsetrue1076553910.30.40.6410truefalse000255.255.255.0false12:4A:CE:8D:C7:A4Xennet{A204115D-3898-4C28-834B-A79690BD64D2}1true10.30.1.10txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_OperatingSystem.properties000066400000000000000000000017431305406262000270430ustar00rootroot00000000000000WindowsDirectory LastBootUpTime MaxProcessMemorySize MaxNumberOfProcesses FreePhysicalMemory DataExecutionPrevention_Available CSName SystemDrive SerialNumber Distributed CreationClassName CSCreationClassName Debug SizeStoredInPagingFiles FreeSpaceInPagingFiles ProductType Organization OSType CurrentTimeZone SystemDirectory RegisteredUser Status BuildNumber NumberOfProcesses CountryCode ForegroundApplicationBoost PlusProductID PAEEnabled OSLanguage DataExecutionPrevention_Drivers TotalVirtualMemorySize NumberOfLicensedUsers DataExecutionPrevention_SupportPolicy TotalSwapSpaceSize Manufacturer BuildType CSDVersion FreeVirtualMemory SuiteMask InstallDate NumberOfUsers Caption QuantumLength EncryptionLevel LocalDateTime OtherTypeDescription SystemDevice OSProductSuite PlusVersionNumber Description QuantumType Locale BootDevice Primary ServicePackMajorVersion Version LargeSystemCache CodeSet ServicePackMinorVersion Name DataExecutionPrevention_32BitApplications TotalVisibleMemorySize txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_OperatingSystem_all_000.xml000066400000000000000000000071501305406262000266540ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:4BE3DB82-408D-4234-BBC1-A778F858ADF6http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959\Device\HarddiskVolume13790Uniprocessor FreeMicrosoft(R) Windows(R) Server 2003 Datacenter x64 Edition12521Win32_OperatingSystemWin32_ComputerSystemService Pack 2AMAZON-9DC6EF030truetruetrue3falsefalse1680248032416274844136202013-03-11T21:28:04Z12013-04-15T16:28:38.376625Z2013-04-15T20:27:39.84Z0409Microsoft Corporation42949672958589934464Microsoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition15342AMAZON103340218R2true300AMAZON76871-644-6528304-50143204177920OK402\Device\HarddiskVolume1C:\WINDOWS\system32C:47655446292005.2.3790C:\WINDOWStxwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_OperatingSystem_star_000.xml000066400000000000000000000100051305406262000270460ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:4DC32C75-9517-4CD6-9FAF-1CCFA70A8F0Fhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959\Device\HarddiskVolume13790Uniprocessor FreeMicrosoft(R) Windows(R) Server 2003 Datacenter x64 Edition12521Win32_OperatingSystemWin32_ComputerSystemService Pack 2AMAZON-9DC6EF030truetruetrue3falsefalse1680248048416274844136162013-03-11T21:28:04Z12013-04-15T16:28:38.376625Z2013-04-15T20:27:39.762Z0409Microsoft Corporation42949672958589934464Microsoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition15342AMAZON103340218R2true300AMAZON76871-644-6528304-50143204177920OK402\Device\HarddiskVolume1C:\WINDOWS\system32C:47655446292005.2.3790C:\WINDOWStxwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_PerfRawData_PerfDisk_PhysicalDisk.properties000066400000000000000000000014301305406262000322750ustar00rootroot00000000000000PercentDiskReadTime_Base DiskBytesPersec Timestamp_Object AvgDisksecPerTransfer_Base AvgDiskBytesPerTransfer Description PercentIdleTime AvgDiskQueueLength Frequency_Sys100NS DiskWriteBytesPersec AvgDiskBytesPerTransfer_Base Timestamp_Sys100NS DiskWritesPersec PercentDiskTime AvgDiskBytesPerWrite AvgDiskBytesPerRead PercentDiskTime_Base AvgDisksecPerRead Timestamp_PerfTime AvgDiskBytesPerWrite_Base Name CurrentDiskQueueLength AvgDisksecPerWrite DiskReadBytesPersec Caption PercentDiskWriteTime Frequency_Object AvgDisksecPerRead_Base Frequency_PerfTime AvgDiskBytesPerRead_Base SplitIOPerSec AvgDiskReadQueueLength PercentDiskWriteTime_Base PercentDiskReadTime DiskReadsPersec AvgDiskWriteQueueLength AvgDisksecPerTransfer PercentIdleTime_Base DiskTransfersPersec AvgDisksecPerWrite_Base txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_PerfRawData_PerfDisk_PhysicalDisk_all_000.xml000066400000000000000000000156521305406262000321230ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:8A2A12D2-EE34-4DE8-89F9-9538A95B2448http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C47800395926240460821013503986176584372415815683742420757790004879810001746749942101374303443458437568359439374241587798000050398617626240460821013584372415815683742403579545100000000 C:487981000130105312647000736207577900013010531264700073615877980001301053126470007361417863110001301053126470007365042051403437548143603272000000000000000000000000003579545100000001 D:01301053126470007360130105312647000736013010531264700073614341510700013010531264700073600514034375481436032720002624046082101350398617658437241581568374242075779000487981000174674994210137430344345843756835943937424158779800005039861762624046082101358437241581568374240357954510000000_Total24399050013010531264700073610378895001301053126470007367938990001301053126470007361426007090001301053126470007365042051403437548143603272000txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_PerfRawData_PerfDisk_PhysicalDisk_star_000.xml000066400000000000000000000200221305406262000323070ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:3DD56162-3AAD-4480-BDC6-A3A632DAE4EChttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C47800395926240460821013503986176584372415815683742420757790004879810001746749942101374303443458437568359439374241587798000050398617626240460821013584372415815683742403579545100000000 C:487981000130105312646219521207577900013010531264621952115877980001301053126462195211417854950001301053126462195215042051403146177143602458000000000000000000000000003579545100000001 D:01301053126462195210130105312646219521013010531264621952114341429100013010531264621952100514031461771436024580002624046082101350398617658437241581568374242075779000487981000174674994210137430344345843756835943937424158779800005039861762624046082101358437241581568374240357954510000000_Total24399050013010531264621952110378895001301053126462195217938990001301053126462195211425998930001301053126462195215042051403146177143602458000txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_PerfRawData_PerfProc_Process.properties000066400000000000000000000011161305406262000313360ustar00rootroot00000000000000PageFaultsPersec PriorityBase Timestamp_Object WorkingSet HandleCount ThreadCount IDProcess IOOtherBytesPersec Description PercentProcessorTime Timestamp_Sys100NS CreatingProcessID PageFileBytesPeak Frequency_Sys100NS IOReadBytesPersec IOWriteBytesPersec IOWriteOperationsPersec PercentUserTime VirtualBytes WorkingSetPeak IODataBytesPersec Timestamp_PerfTime PageFileBytes Name ElapsedTime Caption PercentPrivilegedTime PoolPagedBytes PrivateBytes Frequency_Object VirtualBytesPeak Frequency_PerfTime IOOtherOperationsPersec PoolNonpagedBytes IODataOperationsPersec IOReadOperationsPersec txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_PerfRawData_PerfProc_Process_all_000.xml000066400000000000000000001622401305406262000311570ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:2FBCA52D-5C5C-4D50-83E9-00A7A97951C7http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039590130105169215468750100000003579545100000000000000000Idle0001366053125001366053125000000011301053126504380825140466778314360670900000245760013010516921546875010000000357954510000000694415515262306328378675112923134202125921282861System1318500221406250221406250000857344721301053126504380825140466778314360670900024944641408614427852812939264413010516921546875010000000357954510000000243248222139262038218944smss3373072002527232109375010937500160077201130720051301053126504380825140466778314360670900062709761773158471680072089632413010516925140625010000000357954510000000440376292037612105792568529203761200csrss2045148684814868482343750500000026562508720167064131486848101301053126504380825140466778314360670900068681728688250884022272405913632413010516925656250010000000357954510000000627400201634185575003108167659973397588winlogon7081107438081166131217187505000000328125017105613640813107438081913010531265043808251404667783143606709000821288969426944016580608166420484001301051692675000001000000035795451000000043344828746911742107350501424046321804700591562services125778867840220405761629687502640625001010937502020810157698867840171301053126504380825140466778314360670900033198489663344230410477568260096004001301051692695312501000000035795451000000064746018179365218607199798328196879339631239461024540294661lsass5252130744321352499244062500668750002281250050768162752913074432381301053126504380825140466778314360670900010879385611246387216318464163880964481301051692818750001000000035795451000000086680105222139961996641138811svchost13201454080156057615625031250015625051045296081454080513010531265043808251404667783143606709000291061763221913641410564214784448130105169286093750100000003579545100000002507366962012195815354681022810svchost4333248217624944645968750010078125041093750347046848082482176121301053126504380825140466778314360670900033935360354713605718016572211244813010516928687500010000000357954510000000146800239440117270210722542214018svchost352657098246057984625000937500312500111841073208570982481301053126504380825140466778314360670900066023424681205767307264747520044813010516928718750010000000357954510000000177836540076232221398276438263638svchost1571207667224125441562501562500872060280820766721313010531265043808251404667783143606709000369377283798630456360965652480448130105169287812500100000003579545100000001550864965050369240215734911131479049455255355601048437047svchost9066043028992061669376130750000031812500001873750000904002840248302899205413010531265043808251404667783143606709000480186368799387648439869447453900844813010516946593750010000000357954510000000122102011322439223256721246012spoolsv23145115904685670415625031250015625089441007928511590412130105312650438082514046677831436067090005764300864249856722124878929924481301051694664062501000000035795451000000014910481821605234222105601118160041msdtc1972258048026460160156250156250113446331282580480131301053126504380825140466778314360670900038453248395018246881280690995244813010516948671875010000000357954510000000661224696202490824681022810svchost85310608641110016000416049656810608642130105312650438082514046677831436067090002567782426202112339558434119684481301051694882812501000000035795451000000041132856418318724969689svchost780843776111820801562501562503344333288843776213010531265043808251404667783143606709000166461442079129624985602805760448130105169491562500100000003579545100000006814327122025901174841022810svchost149635635204558848015625015625044644876083563520513010531265043808251404667783143606709000276357122901606455582725591040448130105169491562500100000003579545100000003091460100025528353251457444230556025svchost1444012062720136232963437500859375051562501854314360081206272017130105312650438082514046677831436067090009274982497996800159334401617100844813010516956812500010000000357954510000000406171623025219736015229772003009429952103Ec2Config151984516659245379584781250562500048437503202827064884516659214130105312650438082514046677831436067090005705605125736407044002201640185856448130105169588125000100000003579545100000008591816102743129518782309604139918782355647XenGuestAgent410989681533447417446415718750072796875057078125032716346400868153344171301053126504380825140466778314360670900065267302465372160055525376616038406801301051696046875001000000035795451000000077319123133730627681059904649251921791031513685513426991139955wmiprvse808004148193281823948839765625077328125037562500024848176344814819328161301053126504380825140466778314360670900012418252813810483227029504301301764481301051696114062501000000035795451000000022420081259555882225081634118448537750751svchost25903375104243056643281250734375040625001155289976833751042213010531265043808251404667783143606709000792125448017510478192647823360448130105169613750000100000003579545100000008720329402232461065521138811alg1128131072013844480156250156250785655280813107205130105312650438082514046677831436067090002922905630801920446054444974086801301051696223437501000000035795451000000017862046885567143564811070109380547884413464067271022wmiprvse4231158316211297443846106250001459531250848906250768071064831621127130105312650438082514046677831436067090004147200049709056855244812038144448130105169689622500100000003579545100000002222280100422148022616161138811svchost160137724163969024000113448483283772416141301053126504380825140466778314360670900050266112523632645656576571801644813010516971644812510000000357954510000000110249255085830602447254429296429vssvc149816793602043904312500312500055046692881679360513010531265043808251404667783143606709000357007363779788858408965910528324130105169957721875100000003579545100000001242972232281736364979895682419623228173600csrss201220029442027520781250171875093750072809644813200294411130105312650438082514046677831436067090004823040048431104452608045629443241301051699577218751000000035795451000000023230004385603625769815058127143725622130414winlogon5068412467244646401093750375000026562501363216082413412467214130105312650438082514046677831436067090008496332888743936274841610739712300013010517004808187510000000357954510000000741480227022431418513861188411rdpclip1820163430416834560005280124728816343043130105312650438082514046677831436067090006581043269906432176947252838403641301051700535725001000000035795451000000029280834867694041288495922126573485209388156016explorer8048969523210211328203125021875001562502168021273689695232813010531265043808251404667783143606709000112271360121737216592691217342464808130105170069416875100000003579545100000007622082762196414711611601ctfmon12959502729748480156250156250584087216895027211301053126504380825140466778314360670900043802624443269128560643997696220813010517007239750010000000357954510000000562176208216841389211161ctfmon1206774144823296156250156250042407738487741441130105312650438082514046677831436067090004193894443831296860160342016080813010517010000750010000000357954510000000282252706492827470600cmd654195788819578880002960736488195788811301053126504380825140466778314360670900037236736372367361228802600960400130105175670218200100000003579545100000002015480058220000logon.scr6279297929297923125003125000304076632492979211301053126504380825140466778314360670900040505344405053442437120249446401301053126504380821000000035795451000000095900174433753667440403765245324341786312677372331976147660030347679_Total64725822652282883576627201395848437501434440625003859218750650743365912002652856324451301053126504380825140466778314360670900035634053124302794752330850304435494912txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_PerfRawData_PerfProc_Process_star_000.xml000066400000000000000000002114341305406262000313600ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:6095CFC3-74DA-4CBA-9F71-7F0B9F1F71EBhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039590130105169215468750100000003579545100000000000000000Idle0001366029687501366029687500000011301053126477819515140371291514360404100000245760013010516921546875010000000357954510000000694415515262306328378675112923134202125921282861System1318500221406250221406250000857344721301053126477819515140371291514360404100024944641408614427852812939264413010516921546875010000000357954510000000243248222139262038218944smss3373072002527232109375010937500160077201130720051301053126477819515140371291514360404100062709761773158471680072089632413010516925140625010000000357954510000000440376292037612105792568529203761200csrss2045148684814868482343750500000026562508720167064131486848101301053126477819515140371291514360404100068681728688250884022272405913632413010516925656250010000000357954510000000627400201634185575003108167659973397588winlogon7081107438081166131217187505000000328125017105613640813107438081913010531264778195151403712915143604041000821288969426944016580608166420484001301051692675000001000000035795451000000043344828725791732107350501424046321804679471552services125778867840220405761629687502640625001010937502020810157698867840171301053126477819515140371291514360404100033198489663344230410477568260096004001301051692695312501000000035795451000000064746018179365218607199798328196879339631239461024540294661lsass5252130744321352499244062500668750002281250050768162752913074432381301053126477819515140371291514360404100010879385611246387216318464163880964481301051692818750001000000035795451000000086680105222139961996641138811svchost13201454080156057615625031250015625051045296081454080513010531264778195151403712915143604041000291061763221913641410564214784448130105169286093750100000003579545100000002507366962012195815354681022810svchost4333248217624944645968750010078125041093750347046848082482176121301053126477819515140371291514360404100033935360354713605718016572211244813010516928687500010000000357954510000000146800239440117270210722542214018svchost352657098246057984625000937500312500111841073208570982481301053126477819515140371291514360404100066023424681205767307264747520044813010516928718750010000000357954510000000177836540076232221398276438263638svchost1571207667224125441562501562500872060280820766721313010531264778195151403712915143604041000369377283798630456360965652480448130105169287812500100000003579545100000001550864965050369240215734911131479049455255355601048437047svchost9066033028992061669376130750000031810937501873593750904002840248302899205413010531264778195151403712915143604041000480186368799387648439869447453900844813010516946593750010000000357954510000000122102011322439223256721246012spoolsv23145115904685670415625031250015625089441007928511590412130105312647781951514037129151436040410005764300864249856722124878929924481301051694664062501000000035795451000000014910481821605234222105601118160041msdtc1972258048026460160156250156250113446331282580480131301053126477819515140371291514360404100038453248395018246881280690995244813010516948671875010000000357954510000000661224696202490824681022810svchost85310608641110016000416049656810608642130105312647781951514037129151436040410002567782426202112339558434119684481301051694882812501000000035795451000000041132856418318724969689svchost780843776111820801562501562503344333288843776213010531264778195151403712915143604041000166461442079129624985602805760448130105169491562500100000003579545100000006814327122025901174841022810svchost149635635204558848015625015625044644876083563520513010531264778195151403712915143604041000276357122901606455582725591040448130105169491562500100000003579545100000003091460100025527619481453444230556025svchost1441812075008136232963281250843750051562501849514360081207500817130105312647781951514037129151436040410009274982497996800159457281617100844813010516956812500010000000357954510000000406171623025219736015229772003009429952103Ec2Config151984516659245379584781250562500048437503202827064884516659214130105312647781951514037129151436040410005705605125736407044002201640185856448130105169588125000100000003579545100000008591816102743129518782309604139918782355647XenGuestAgent410989681533447417446415718750072796875057078125032716346400868153344171301053126477819515140371291514360404100065267302465372160055525376616038406801301051696046875001000000035795451000000077319123133730627681059904649251921791031513685513426991139955wmiprvse807956148193281823948839765625077328125037562500024848176344814819328161301053126477819515140371291514360404100012418252813810483227029504301301764481301051696114062501000000035795451000000022420081259555882225081634118448537750751svchost25903375104243056643281250734375040625001155289976833751042213010531264778195151403712915143604041000792125448017510478192647823360448130105169613750000100000003579545100000008720329402232461065521138811alg1128131072013844480156250156250785655280813107205130105312647781951514037129151436040410002922905630801920446054444974086801301051696223437501000000035795451000000017862046885567143564811070109380547884413464067271022wmiprvse4231158316211297443846106250001459531250848906250768071064831621127130105312647781951514037129151436040410004147200049709056855244812038144448130105169689622500100000003579545100000002222280100422148022616161138811svchost160137724163969024000113448483283772416141301053126477819515140371291514360404100050266112523632645656576571801644813010516971644812510000000357954510000000110249255085830602447254429296429vssvc149816793602043904312500312500055046692881679360513010531264778195151403712915143604041000357007363779788858408965910528324130105169957721875100000003579545100000001242972232281736364979895682419623228173600csrss201220029442027520781250171875093750072809644813200294411130105312647781951514037129151436040410004823040048431104452608045629443241301051699577218751000000035795451000000023230004385603625769815058127143725622130414winlogon5068412467244646401093750375000026562501363216082413412467214130105312647781951514037129151436040410008496332888743936274841610739712300013010517004808187510000000357954510000000741480227022431418513861188411rdpclip1820163430416834560005280124728816343043130105312647781951514037129151436040410006581043269906432176947252838403641301051700535725001000000035795451000000029280834867694041288495922126573485209388156016explorer8048969523210211328203125021875001562502168021273689695232813010531264778195151403712915143604041000112271360121737216592691217342464808130105170069416875100000003579545100000007622082762196414711611601ctfmon12959502729748480156250156250584087216895027211301053126477819515140371291514360404100043802624443269128560643997696220813010517007239750010000000357954510000000562176208216841389211161ctfmon1206774144823296156250156250042407738487741441130105312647781951514037129151436040410004193894443831296860160342016080813010517010000750010000000357954510000000282252706492827470600cmd654195788819578880002960736488195788811301053126477819515140371291514360404100037236736372367361228802600960400130105175670218200100000003579545100000002015480058220000logon.scr6279297929297923125003125000304076632492979211301053126477819515140371291514360404100040505344405053442437120249446401301053126477819511000000035795451000000095900174431641667430403765171947341785912677372331976147657918347669_Total64725112652405763576627201395823437501434414062503859062500650695365912002652979204451301053126477819515140371291514360404100035634053124302794752330862592435494912txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_PerfRawData_Tcpip_NetworkInterface.properties000066400000000000000000000007741305406262000325420ustar00rootroot00000000000000OutputQueueLength Frequency_Sys100NS BytesTotalPersec PacketsReceivedDiscarded PacketsSentUnicastPersec Timestamp_Object PacketsReceivedNonUnicastPersec PacketsPersec Timestamp_Sys100NS PacketsReceivedPersec PacketsOutboundDiscarded Timestamp_PerfTime PacketsReceivedUnknown Name PacketsSentPersec Caption PacketsReceivedUnicastPersec BytesReceivedPersec Frequency_Object Frequency_PerfTime Description PacketsOutboundErrors PacketsReceivedErrors BytesSentPersec CurrentBandwidth PacketsSentNonUnicastPersec txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_PerfRawData_Tcpip_NetworkInterface_all_000.xml000066400000000000000000000066001305406262000323470ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:4B841EF2-1E74-42EC-94AF-EA3AC8585FADhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039599764373349863432630010000000000357954510000000Citrix PV Ethernet Adapter _00001310300985714561609673897293051393097521143574385000316363163663272100000000357954510000000MS TCP Loopback interface0001680008484008484051393097521143574385000txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_PerfRawData_Tcpip_NetworkInterface_star_000.xml000066400000000000000000000100101305406262000325360ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:8849169C-ADDE-48AE-8C79-525A20503564http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039599743523345272431962410000000000357954510000000Citrix PV Ethernet Adapter _00001309400985710561209673847288051392845972143573683000316363163663272100000000357954510000000MS TCP Loopback interface0001680008484008484051392845972143573683000txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Process.properties000066400000000000000000000012511305406262000253160ustar00rootroot00000000000000MaximumWorkingSetSize MinimumWorkingSetSize ThreadCount KernelModeTime Priority OtherTransferCount VirtualSize CSCreationClassName PrivatePageCount Status ProcessId PeakVirtualSize Handle Description OSCreationClassName HandleCount PeakPageFileUsage QuotaPeakNonPagedPoolUsage CSName WindowsVersion WorkingSetSize WriteOperationCount PageFaults Name InstallDate ParentProcessId QuotaPeakPagedPoolUsage OtherOperationCount CommandLine PeakWorkingSetSize Caption QuotaNonPagedPoolUsage PageFileUsage ReadOperationCount TerminationDate QuotaPagedPoolUsage WriteTransferCount ExecutionState SessionId OSName CreationDate UserModeTime CreationClassName ExecutablePath ReadTransferCount txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Process_all_000.xml000066400000000000000000002133351305406262000251410ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:586FD0D0-1F4E-40C6-B5C3-281A71DD8324http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959System Idle ProcessWin32_ProcessWin32_ComputerSystemAMAZON-9DC6EF03System Idle Process00136598906250System Idle ProcessWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition10000000000000000001005.2.37902457600SystemWin32_ProcessWin32_ComputerSystemAMAZON-9DC6EF03System469422140625013800SystemWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition17509283786131850001408614412636857344400002022923134072024944645.2.3790278528286112592128smss.exe\SystemRoot\System32\smss.exeWin32_Process2013-04-15T16:28:41.546875ZWin32_ComputerSystemAMAZON-9DC6EF03smss.exe3242410937501380200smss.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1203926337300424681773158470411307200324283319821805062709765.2.379071680044csrss.exeC:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:28:45.140625ZWin32_ComputerSystemAMAZON-9DC6EF03csrss.exeC:\WINDOWS\system32\csrss.exe37644023437501380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition15685105792204514523241452688250883964131486848376916491656122920370102656250686817285.2.3790402227200winlogon.exewinlogon.exeWin32_Process2013-04-15T16:28:45.65625ZWin32_ComputerSystemAMAZON-9DC6EF03winlogon.exeC:\WINDOWS\system32\winlogon.exe40062717187501380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition13108575007081104923241138894269440162521310743808400168134171159971676590193281250821288965.2.3790165806088833975services.exeC:\WINDOWS\system32\services.exeWin32_Process2013-04-15T16:28:46.75ZWin32_ComputerSystemAMAZON-9DC6EF03services.exeC:\WINDOWS\system32\services.exe4484331629687501380200services.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition15014107350125778660400215246334423042540098867840448201003115718024046320171010937503319848965.2.3790104775681522461611lsass.exeC:\WINDOWS\system32\lsass.exeWin32_Process2013-04-15T16:28:46.953125ZWin32_ComputerSystemAMAZON-9DC6EF03lsass.exeC:\WINDOWS\system32\lsass.exe460647440625001380200lsass.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition12819681997983525212768400132081124638721600491307443246050159621681239467933963038228125001087938565.2.3790163184649466110245402svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunchWin32_Process2013-04-15T16:28:48.1875ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe680861562501380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition119913996132014204481524322191364116814540806805526571166405156250291061765.2.3790414105611388svchost.exeC:\WINDOWS\system32\svchost.exe -k rpcssWin32_Process2013-04-15T16:28:48.609375ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe736250596875001380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1153512195843332424448243635471360558882482176736346735671046801241093750339353605.2.3790571801610228svchost.exeC:\WINDOWS\system32\svchost.exe -k NetworkServiceWin32_Process2013-04-15T16:28:48.6875ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe8001466250001380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1210711727035265576448591668120576730085709824800111051612222225408312500660234245.2.3790730726418140svchost.exeC:\WINDOWS\system32\svchost.exe -k LocalServiceWin32_Process2013-04-15T16:28:48.71875ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe8361771562501380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition11398232221571202844823563798630455208207667283695915603827640130369377285.2.37905636096382636svchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsWin32_Process2013-04-15T16:28:48.78125ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\System32\svchost.exe864155013073437501380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1113147157347590650629580448602247993876487279283028992086489278162418553539047816805418734375004801863685.2.379043974656370476010484spoolsv.exeC:\WINDOWS\system32\spoolsv.exeWin32_Process2013-04-15T16:29:06.59375ZWin32_ComputerSystemAMAZON-9DC6EF03spoolsv.exeC:\WINDOWS\system32\spoolsv.exe10201221562501380200spoolsv.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition132539222314499644866966424985677088511590410209991311212672012156250576430085.2.3790722124812460msdtc.exeC:\WINDOWS\system32\msdtc.exeWin32_Process2013-04-15T16:29:06.640625ZWin32_ComputerSystemAMAZON-9DC6EF03msdtc.exeC:\WINDOWS\system32\msdtc.exe104814901380200msdtc.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition121034221972252044825843950182467488258048010481262126311560013156250384532485.2.3790688128041181600svchost.exeC:\WINDOWS\System32\svchost.exe -k WinErrWin32_Process2013-04-15T16:29:08.671875ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\System32\svchost.exe12246601380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition18224908531036448108426202112333281060864122454954910468020256778245.2.3790339558410228svchost.exeC:\WINDOWS\system32\svchost.exe -k regsvcWin32_Process2013-04-15T16:29:08.828125ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe13284101380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition172318780824448109220791296274088437761328433441949602156250166461445.2.37902498560968svchost.exeC:\WINDOWS\system32\svchost.exe -k wecsvcWin32_Process2013-04-15T16:29:09.15625ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe14326801380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition111725901496348044844522901606454608356352014325486521048405156250276357125.2.3790555827210228svchost.exeC:\WINDOWS\system32\svchost.exe -k WINRMWin32_Process2013-04-15T16:29:09.15625ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe146030932812501380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1144326673861437411816448133049799680015792812099584146019141771413044420175000000927498245.2.379015958016255560Ec2Config.exe"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"Win32_Process2013-04-15T16:29:16.8125ZWin32_ComputerSystemAMAZON-9DC6EF03Ec2Config.exeC:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe17164067812501380200Ec2Config.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1296935865215198441084484431657364070439244845166592171632265372669420030001448437505705605125.2.37904002201610329952XenGuestAgent.exe"C:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe"Win32_Process2013-04-15T16:29:18.8125ZWin32_ComputerSystemAMAZON-9DC6EF03XenGuestAgent.exeC:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe18168591571875001380200XenGuestAgent.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1960413518782304109896655644872436653721600601608681533441816323393633982991870175707812506526730245.2.379055525376473556wmiprvse.exeC:\WINDOWS\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:29:20.46875ZWin32_ComputerSystemAMAZON-9DC6EF03wmiprvse.exeC:\WINDOWS\system32\wbem\wmiprvse.exe19127733976562501380200wmiprvse.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1925190598758480774514412680178121381048322942481475788819122517330190136855179103150163756250001241825285.2.37902696806413995513426991svchost.exeC:\WINDOWS\System32\svchost.exe -k termsvcsWin32_Process2013-04-15T16:29:21.140625ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\System32\svchost.exe200822432812501380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition116342225082590329644823736801751047640833751042008128812975371184480224062500792125445.2.37907819264517507alg.exeC:\WINDOWS\System32\alg.exeWin32_Process2013-04-15T16:29:21.375ZWin32_ComputerSystemAMAZON-9DC6EF03alg.exeC:\WINDOWS\System32\alg.exe20328701380200alg.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition110632461128128044813523080192043928131072020328549551155205156250292290565.2.3790446054411388wmiprvse.exeC:\WINDOWS\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:29:22.234375ZWin32_ComputerSystemAMAZON-9DC6EF03wmiprvse.exeC:\WINDOWS\system32\wbem\wmiprvse.exe6201786106250001380200wmiprvse.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition110938056481107042311583088680951649709056117568316211262087012714134788407848906250414720005.2.37908552448710224640672svchost.exeC:\WINDOWS\System32\svchost.exe -k tapisrvWin32_Process2013-04-15T16:29:28.96225ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\System32\svchost.exe228022201380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition12611480216013684448387652363264558483772416228012831487116160140502661125.2.3790565657611388vssvc.exeC:\WINDOWS\System32\vssvc.exeWin32_Process2013-04-15T16:29:31.644812ZWin32_ComputerSystemAMAZON-9DC6EF03vssvc.exeC:\WINDOWS\System32\vssvc.exe24921103125001380200vssvc.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition144730602149816404481996377978885772816793602492666766292544050357007365.2.37905840896292964csrss.exeC:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:29:55.772187ZWin32_ComputerSystemAMAZON-9DC6EF03csrss.exeC:\WINDOWS\system32\csrss.exe29721247812501380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition141963649798956822012195632419804843110444561320029442972895898736232281111937500482304005.2.3790452608000winlogon.exewinlogon.exeWin32_Process2013-04-15T16:29:55.772187ZWin32_ComputerSystemAMAZON-9DC6EF03winlogon.exeC:\WINDOWS\system32\winlogon.exe300023210937501380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1127125769815058506840283244360887439361048813412467230001415815160224372561142656250849633285.2.37902748416141304rdpclip.exerdpclipWin32_Process2013-04-15T16:30:04.808187ZWin32_ComputerSystemAMAZON-9DC6EF03rdpclip.exeC:\WINDOWS\system32\rdpclip.exe14807401380200rdpclip.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition11854314182015963000164469906432516081634304148061226130111386130658104325.2.3790176947211884explorer.exeC:\WINDOWS\Explorer.EXEWin32_Process2013-04-15T16:30:05.35725ZWin32_ComputerSystemAMAZON-9DC6EF03explorer.exeC:\WINDOWS\Explorer.EXE80829220312501380200explorer.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1265712884959221804894683649972121737216169368969523280822208232253883485209181562501122713605.2.37905926912161560ctfmon.exe"C:\WINDOWS\system32\ctfmon.exe" Win32_Process2013-04-15T16:30:06.941687ZWin32_ComputerSystemAMAZON-9DC6EF03ctfmon.exeC:\WINDOWS\system32\ctfmon.exe22087601380200ctfmon.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition11471964129592880895244326912390489502722208686786111611156250438026245.2.37908560641160ctfmon.exe"C:\WINDOWS\system32\ctfmon.exe" Win32_Process2013-04-15T16:30:07.23975ZWin32_ComputerSystemAMAZON-9DC6EF03ctfmon.exeC:\WINDOWS\SysWOW64\ctfmon.exe2176561562501380200ctfmon.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition113816841206756220880443831296334087741442176576579192110419389445.2.37908601601116cmd.exe"C:\WINDOWS\system32\cmd.exe" Win32_Process2013-04-15T16:30:10.00075ZWin32_ComputerSystemAMAZON-9DC6EF03cmd.exeC:\WINDOWS\system32\cmd.exe22522801380200cmd.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1274492865419128081912372367362540819578882252372472670110372367365.2.379012288000logon.scrlogon.scr /sWin32_Process2013-04-15T16:39:27.02182ZWin32_ComputerSystemAMAZON-9DC6EF03logon.scrC:\WINDOWS\system32\logon.scr1548203125001380200logon.scrWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition122586279084009084050534424364929792154837537600010405053445.2.3790243712000txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Process_star_000.xml000066400000000000000000002370131305406262000253410ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:F2B3F818-68A6-4BE5-BDB2-EE7803E6C7D2http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959System Idle ProcessWin32_ProcessWin32_ComputerSystemAMAZON-9DC6EF03System Idle Process00136596093750System Idle ProcessWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition10000000000000000001005.2.37902457600SystemWin32_ProcessWin32_ComputerSystemAMAZON-9DC6EF03System469422140625013800SystemWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition17509283786131850001408614412636857344400002022923134072024944645.2.3790278528286112592128smss.exe\SystemRoot\System32\smss.exeWin32_Process2013-04-15T16:28:41.546875ZWin32_ComputerSystemAMAZON-9DC6EF03smss.exe3242410937501380200smss.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1203926337300424681773158470411307200324283319821805062709765.2.379071680044csrss.exeC:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:28:45.140625ZWin32_ComputerSystemAMAZON-9DC6EF03csrss.exeC:\WINDOWS\system32\csrss.exe37644023437501380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition15685105792204514523241452688250883964131486848376916491656122920370102656250686817285.2.3790402227200winlogon.exewinlogon.exeWin32_Process2013-04-15T16:28:45.65625ZWin32_ComputerSystemAMAZON-9DC6EF03winlogon.exeC:\WINDOWS\system32\winlogon.exe40062717187501380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition13108575007081104923241138894269440162521310743808400168134171159971676590193281250821288965.2.3790165806088833975services.exeC:\WINDOWS\system32\services.exeWin32_Process2013-04-15T16:28:46.75ZWin32_ComputerSystemAMAZON-9DC6EF03services.exeC:\WINDOWS\system32\services.exe4484331629687501380200services.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition15014107350125778660400215246334423042540098867840448201003115718024046320171010937503319848965.2.3790104775681512459499lsass.exeC:\WINDOWS\system32\lsass.exeWin32_Process2013-04-15T16:28:46.953125ZWin32_ComputerSystemAMAZON-9DC6EF03lsass.exeC:\WINDOWS\system32\lsass.exe460647440625001380200lsass.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition12819581997911525212768400132081124638721600491307443246050159621681239417933587038228125001087938565.2.3790163184649465710245178svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunchWin32_Process2013-04-15T16:28:48.1875ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe680861562501380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition119913996132014204481524322191364116814540806805526571166405156250291061765.2.3790414105611388svchost.exeC:\WINDOWS\system32\svchost.exe -k rpcssWin32_Process2013-04-15T16:28:48.609375ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe736250596875001380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1153512195843332424448243635471360558882482176736346735671046801241093750339353605.2.3790571801610228svchost.exeC:\WINDOWS\system32\svchost.exe -k NetworkServiceWin32_Process2013-04-15T16:28:48.6875ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe8001466250001380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1210711727035265576448591668120576730085709824800111051612222225408312500660234245.2.3790730726418140svchost.exeC:\WINDOWS\system32\svchost.exe -k LocalServiceWin32_Process2013-04-15T16:28:48.71875ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe8361771562501380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition11398232221571202844823563798630455208207667283695915603827640130369377285.2.37905636096382636svchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsWin32_Process2013-04-15T16:28:48.78125ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\System32\svchost.exe864155013071875001380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1113147157347590650529580448602247993876487279283028992086489278162418553539047816805418732812504801863685.2.379043974656370476010484spoolsv.exeC:\WINDOWS\system32\spoolsv.exeWin32_Process2013-04-15T16:29:06.59375ZWin32_ComputerSystemAMAZON-9DC6EF03spoolsv.exeC:\WINDOWS\system32\spoolsv.exe10201221562501380200spoolsv.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition132539222314499644866966424985677088511590410209991311212672012156250576430085.2.3790722124812460msdtc.exeC:\WINDOWS\system32\msdtc.exeWin32_Process2013-04-15T16:29:06.640625ZWin32_ComputerSystemAMAZON-9DC6EF03msdtc.exeC:\WINDOWS\system32\msdtc.exe104814901380200msdtc.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition121034221972252044825843950182467488258048010481262126311560013156250384532485.2.3790688128041181600svchost.exeC:\WINDOWS\System32\svchost.exe -k WinErrWin32_Process2013-04-15T16:29:08.671875ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\System32\svchost.exe12246601380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition18224908531036448108426202112333281060864122454954910468020256778245.2.3790339558410228svchost.exeC:\WINDOWS\system32\svchost.exe -k regsvcWin32_Process2013-04-15T16:29:08.828125ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe13284101380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition172318780824448109220791296274088437761328433441949602156250166461445.2.37902498560968svchost.exeC:\WINDOWS\system32\svchost.exe -k wecsvcWin32_Process2013-04-15T16:29:09.15625ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe14326801380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition111725901496348044844522901606454608356352014325486521048405156250276357125.2.3790555827210228svchost.exeC:\WINDOWS\system32\svchost.exe -k WINRMWin32_Process2013-04-15T16:29:09.15625ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\system32\svchost.exe146030932812501380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1143925829481434411812448133049799680015792812095488146019141771413044420175000000927498245.2.379015958016255560Ec2Config.exe"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"Win32_Process2013-04-15T16:29:16.8125ZWin32_ComputerSystemAMAZON-9DC6EF03Ec2Config.exeC:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe17164067812501380200Ec2Config.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1296935865215198441084484431657364070439244845166592171632265372669420030001448437505705605125.2.37904002201610329952XenGuestAgent.exe"C:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe"Win32_Process2013-04-15T16:29:18.8125ZWin32_ComputerSystemAMAZON-9DC6EF03XenGuestAgent.exeC:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe18168591571875001380200XenGuestAgent.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1960413518782304109896655644872436653721600601608681533441816323393633982991870175707812506526730245.2.379055525376473556wmiprvse.exeC:\WINDOWS\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:29:20.46875ZWin32_ComputerSystemAMAZON-9DC6EF03wmiprvse.exeC:\WINDOWS\system32\wbem\wmiprvse.exe19127733976562501380200wmiprvse.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1925186598758480769914224680178121381048322942481456537619122517330190136851179100910163756250001241825285.2.37902677964813995113426615svchost.exeC:\WINDOWS\System32\svchost.exe -k termsvcsWin32_Process2013-04-15T16:29:21.140625ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\System32\svchost.exe200822432812501380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition116342225082590329644823736801751047640833751042008128812975371184480224062500792125445.2.37907819264517507alg.exeC:\WINDOWS\System32\alg.exeWin32_Process2013-04-15T16:29:21.375ZWin32_ComputerSystemAMAZON-9DC6EF03alg.exeC:\WINDOWS\System32\alg.exe20328701380200alg.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition110632461128128044813523080192043928131072020328549551155205156250292290565.2.3790446054411388wmiprvse.exeC:\WINDOWS\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:29:22.234375ZWin32_ComputerSystemAMAZON-9DC6EF03wmiprvse.exeC:\WINDOWS\system32\wbem\wmiprvse.exe6201786106250001380200wmiprvse.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition110938056481107042311583088680951649709056117568316211262087012714134788407848906250414720005.2.37908552448710224640672svchost.exeC:\WINDOWS\System32\svchost.exe -k tapisrvWin32_Process2013-04-15T16:29:28.96225ZWin32_ComputerSystemAMAZON-9DC6EF03svchost.exeC:\WINDOWS\System32\svchost.exe228022201380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition12611480216013684448387652363264558483772416228012831487116160140502661125.2.3790565657611388vssvc.exeC:\WINDOWS\System32\vssvc.exeWin32_Process2013-04-15T16:29:31.644812ZWin32_ComputerSystemAMAZON-9DC6EF03vssvc.exeC:\WINDOWS\System32\vssvc.exe24921103125001380200vssvc.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition144730602149816404481996377978885772816793602492666766292544050357007365.2.37905840896292964csrss.exeC:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:29:55.772187ZWin32_ComputerSystemAMAZON-9DC6EF03csrss.exeC:\WINDOWS\system32\csrss.exe29721247812501380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition141963649798956822012195632419804843110444561320029442972895898736232281111937500482304005.2.3790452608000winlogon.exewinlogon.exeWin32_Process2013-04-15T16:29:55.772187ZWin32_ComputerSystemAMAZON-9DC6EF03winlogon.exeC:\WINDOWS\system32\winlogon.exe300023210937501380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1127125769815058506840283244360887439361048813412467230001415815160224372561142656250849633285.2.37902748416141304rdpclip.exerdpclipWin32_Process2013-04-15T16:30:04.808187ZWin32_ComputerSystemAMAZON-9DC6EF03rdpclip.exeC:\WINDOWS\system32\rdpclip.exe14807401380200rdpclip.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition11854314182015963000164469906432516081634304148061226130111386130658104325.2.3790176947211884explorer.exeC:\WINDOWS\Explorer.EXEWin32_Process2013-04-15T16:30:05.35725ZWin32_ComputerSystemAMAZON-9DC6EF03explorer.exeC:\WINDOWS\Explorer.EXE80829220312501380200explorer.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1265712884959221804894683649972121737216169368969523280822208232253883485209181562501122713605.2.37905926912161560ctfmon.exe"C:\WINDOWS\system32\ctfmon.exe" Win32_Process2013-04-15T16:30:06.941687ZWin32_ComputerSystemAMAZON-9DC6EF03ctfmon.exeC:\WINDOWS\system32\ctfmon.exe22087601380200ctfmon.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition11471964129592880895244326912390489502722208686786111611156250438026245.2.37908560641160ctfmon.exe"C:\WINDOWS\system32\ctfmon.exe" Win32_Process2013-04-15T16:30:07.23975ZWin32_ComputerSystemAMAZON-9DC6EF03ctfmon.exeC:\WINDOWS\SysWOW64\ctfmon.exe2176561562501380200ctfmon.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition113816841206756220880443831296334087741442176576579192110419389445.2.37908601601116cmd.exe"C:\WINDOWS\system32\cmd.exe" Win32_Process2013-04-15T16:30:10.00075ZWin32_ComputerSystemAMAZON-9DC6EF03cmd.exeC:\WINDOWS\system32\cmd.exe22522801380200cmd.exeWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition1274492865419128081912372367362540819578882252372472670110372367365.2.379012288000logon.scrlogon.scr /sWin32_Process2013-04-15T16:39:27.02182ZWin32_ComputerSystemAMAZON-9DC6EF03logon.scrC:\WINDOWS\system32\logon.scr1548203125001380200logon.scrWin32_OperatingSystemMicrosoft Windows Server 2003 R2 Datacenter x64 Edition|C:\WINDOWS|\Device\Harddisk0\Partition122586279084009084050534424364929792154837537600010405053445.2.3790243712000txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Processor.properties000066400000000000000000000010571305406262000256630ustar00rootroot00000000000000L2CacheSize ConfigManagerErrorCode VoltageCaps PowerManagementSupported LoadPercentage Version MaxClockSpeed CpuStatus Revision Status PNPDeviceID L2CacheSpeed AddressWidth ConfigManagerUserConfig ErrorCleared ProcessorId ProcessorType DeviceID CurrentVoltage CurrentClockSpeed Manufacturer Name InstallDate Level SocketDesignation Caption StatusInfo Architecture UniqueId CreationClassName OtherFamilyDescription Description Family ErrorDescription UpgradeMethod SystemName LastErrorCode ExtClock Stepping Role Availability SystemCreationClassName DataWidth txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Processor_all_000.xml000066400000000000000000000044761305406262000255060ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:8649E61B-6AC6-48FD-89C2-D9A452196A81http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039596493EM64T Family 6 Model 44 Stepping 21Win32_Processor214464EM64T Family 6 Model 44 Stepping 2CPU0260GenuineIntel2144Intel(R) Xeon(R) CPU E5645 @ 2.40GHzfalse1789FBFF000206C2311266CPUCPU 1OK32Win32_ComputerSystemAMAZON-9DC6EF031Model 12, Stepping 20txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Processor_star_000.xml000066400000000000000000000051141305406262000256750ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:BA2F920F-D8C9-4131-A985-836B030EE536http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039596493EM64T Family 6 Model 44 Stepping 21Win32_Processor214464EM64T Family 6 Model 44 Stepping 2CPU0260GenuineIntel2144Intel(R) Xeon(R) CPU E5645 @ 2.40GHzfalse1789FBFF000206C2311266CPUCPU 1OK32Win32_ComputerSystemAMAZON-9DC6EF031Model 12, Stepping 20txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Service.properties000066400000000000000000000004351305406262000253030ustar00rootroot00000000000000DisplayName ServiceSpecificExitCode State SystemName ErrorControl Status ProcessId Description Started AcceptStop CheckPoint PathName WaitHint Name InstallDate Caption StartMode DesktopInteract ServiceType TagId StartName AcceptPause CreationClassName SystemCreationClassName ExitCode txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Service_all_000.xml000066400000000000000000003712061305406262000251250ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:C767A712-6CE8-47DD-9A05-8C4E215ADC68http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959falsefalseApplication Experience Lookup Service0Win32_ServiceProcess application compatibility lookup requests for applications as they are launched.falseApplication Experience Lookup ServiceNormal0AeLookupSvcC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseAlerter0Win32_ServiceNotifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start.falseAlerterNormal1077AlerterC:\WINDOWS\system32\svchost.exe -k LocalService00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueApplication Layer Gateway Service0Win32_ServiceProvides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows FirewallfalseApplication Layer Gateway ServiceNormal0ALGC:\WINDOWS\System32\alg.exe20320Own ProcesstrueManualNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseApplication Management0Win32_ServiceProcesses installation, removal, and enumeration requests for Active Directory IntelliMirror group policy programs. If the service is disabled, users will be unable to install, remove, or enumerate any IntelliMirror programs. If this service is disabled, any services that explicitly depend on it will fail to start.falseApplication ManagementNormal1077AppMgmtC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseASP.NET State Service0Win32_ServiceProvides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start.falseASP.NET State ServiceNormal1077aspnet_stateC:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Audio0Win32_ServiceManages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows AudioNormal1077AudioSrvC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseBackground Intelligent Transfer Service0Win32_ServiceTransfers files in the background using idle network bandwidth. If the service is stopped, features such as Windows Update, and MSN Explorer will be unable to automatically download programs and other information. If this service is disabled, any services that explicitly depend on it may fail to transfer files if they do not have a fail safe mechanism to transfer files directly through IE in case BITS has been disabled.falseBackground Intelligent Transfer ServiceNormal1077BITSC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueComputer Browser0Win32_ServiceMaintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.falseComputer BrowserNormal0BrowserC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseCloudFormation cfn-hup0Win32_ServiceCloudFormation cfn-hup for WindowsfalseCloudFormation cfn-hupIgnore1077cfn-hup"c:\Program Files\Amazon\cfn-bootstrap\winhup.exe"00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseIndexing Service0Win32_ServiceIndexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language.falseIndexing ServiceNormal1077CiSvcC:\WINDOWS\system32\cisvc.exe00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseClipBook0Win32_ServiceEnables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start.falseClipBookNormal1077ClipSrvC:\WINDOWS\system32\clipsrv.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalse.NET Runtime Optimization Service v2.0.50727_X860Win32_ServiceMicrosoft .NET Framework NGENfalse.NET Runtime Optimization Service v2.0.50727_X86Ignore1077clr_optimization_v2.0.50727_32C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalse.NET Runtime Optimization Service v2.0.50727_x640Win32_ServiceMicrosoft .NET Framework NGENfalse.NET Runtime Optimization Service v2.0.50727_x64Ignore1077clr_optimization_v2.0.50727_64C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseMicrosoft .NET Framework NGEN v4.0.30319_X860Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v4.0.30319_X86Ignore0clr_optimization_v4.0.30319_32C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseMicrosoft .NET Framework NGEN v4.0.30319_X640Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v4.0.30319_X64Ignore0clr_optimization_v4.0.30319_64C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseCOM+ System Application0Win32_ServiceManages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ System ApplicationNormal1077COMSysAppC:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueCryptographic Services0Win32_ServiceProvides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCryptographic ServicesNormal0CryptSvcC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseDCOM Server Process Launcher0Win32_ServiceProvides launch functionality for DCOM services.falseDCOM Server Process LauncherNormal0DcomLaunchC:\WINDOWS\system32\svchost.exe -k DcomLaunch6800Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseDistributed File System0Win32_ServiceIntegrates disparate file shares into a single, logical namespace and manages these logical volumes distributed across a local or wide area network. If this service is stopped, users will be unable to access file shares. If this service is disabled, any services that explicitly depend on it will fail to start.falseDistributed File SystemNormal1077DfsC:\WINDOWS\system32\Dfssvc.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueDHCP Client0Win32_ServiceRegisters and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.falseDHCP ClientNormal0DhcpC:\WINDOWS\system32\svchost.exe -k NetworkService8000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseLogical Disk Manager Administrative Service0Win32_ServiceConfigures hard disk drives and volumes. The service only runs for configuration processes and then stops.falseLogical Disk Manager Administrative ServiceNormal1077dmadminC:\WINDOWS\System32\dmadmin.exe /com00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueLogical Disk Manager0Win32_ServiceDetects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start.falseLogical Disk ManagerNormal0dmserverC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueDNS Client0Win32_ServiceResolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start.falseDNS ClientNormal0DnscacheC:\WINDOWS\system32\svchost.exe -k NetworkService8000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueEc2Config0Win32_ServiceEc2 Configuration ServicefalseEc2ConfigNormal0Ec2Config"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"17160Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueError Reporting Service0Win32_ServiceCollects, stores, and reports unexpected application crashes to Microsoft. If this service is stopped, then Error Reporting will occur only for kernel faults and some types of user mode faults. If this service is disabled, any services that explicitly depend on it will not start.falseError Reporting ServiceIgnore0ERSvcC:\WINDOWS\System32\svchost.exe -k WinErr12240Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseEvent Log0Win32_ServiceEnables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped.falseEvent LogNormal0EventlogC:\WINDOWS\system32\services.exe4480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueCOM+ Event System0Win32_ServiceSupports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ Event SystemNormal0EventSystemC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Presentation Foundation Font Cache 3.0.0.00Win32_ServiceOptimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.falseWindows Presentation Foundation Font Cache 3.0.0.0Normal1077FontCache3.0.0.0C:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueHelp and Support0Win32_ServiceEnables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseHelp and SupportNormal0helpsvcC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseHuman Interface Device Access0Win32_ServiceEnables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.falseHuman Interface Device AccessNormal1077HidServC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueHTTP SSL0Win32_ServiceThis service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start.falseHTTP SSLNormal0HTTPFilterC:\WINDOWS\System32\lsass.exe4600Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseIAS Jet Database Access0Win32_ServiceConfigures Internet Authentication Service (IAS). If this service is stopped, remote network access that requires user authentication will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseIAS Jet Database AccessNormal1077IASJetC:\WINDOWS\SysWOW64\svchost.exe -k iasjet00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows CardSpace0Win32_ServiceSecurely enables the creation, management, and disclosure of digital identities.falseWindows CardSpaceNormal1077idsvc"C:\WINDOWS\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe"00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseIMAPI CD-Burning COM Service0Win32_ServiceManages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start.falseIMAPI CD-Burning COM ServiceNormal1077ImapiServiceC:\WINDOWS\system32\imapi.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseIntersite Messaging0Win32_ServiceEnables messages to be exchanged between computers running Windows Server sites. If this service is stopped, messages will not be exchanged, nor will site routing information be calculated for other services. If this service is disabled, any services that explicitly depend on it will fail to start.falseIntersite MessagingNormal1077IsmServC:\WINDOWS\System32\ismserv.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseKerberos Key Distribution Center0Win32_ServiceOn domain controllers this service enables users to log on to the network using the Kerberos authentication protocol. If this service is stopped on a domain controller, users will be unable to log on to the network. If this service is disabled, any services that explicitly depend on it will fail to start.falseKerberos Key Distribution CenterNormal1077kdcC:\WINDOWS\System32\lsass.exe00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueServer0Win32_ServiceSupports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseServerNormal0lanmanserverC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueWorkstation0Win32_ServiceCreates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWorkstationNormal0lanmanworkstationC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseLicense Logging0Win32_ServiceMonitors and records client access licensing for portions of the operating system (such as IIS, Terminal Server and File/Print) as well as products that aren't a part of the OS, like SQL and Exchange Server. If this service is stopped, licensing will be enforced, but will not be monitored.falseLicense LoggingNormal1077LicenseServiceC:\WINDOWS\System32\llssrv.exe00Own ProcessfalseDisabledNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueTCP/IP NetBIOS Helper0Win32_ServiceProvides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseTCP/IP NetBIOS HelperNormal0LmHostsC:\WINDOWS\system32\svchost.exe -k LocalService8360Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseMessenger0Win32_ServiceTransmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start.falseMessengerNormal1077MessengerC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNetMeeting Remote Desktop Sharing0Win32_ServiceEnables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.trueNetMeeting Remote Desktop SharingNormal1077mnmsrvcC:\WINDOWS\system32\mnmsrvc.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueDistributed Transaction Coordinator0Win32_ServiceCoordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. falseDistributed Transaction CoordinatorNormal0MSDTCC:\WINDOWS\system32\msdtc.exe10480Own ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Installer0Win32_ServiceAdds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows InstallerNormal1077MSIServerC:\WINDOWS\system32\msiexec.exe /V00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNetwork DDE0Win32_ServiceProvides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseNetwork DDENormal1077NetDDEC:\WINDOWS\system32\netdde.exe00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNetwork DDE DSDM0Win32_ServiceManages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. falseNetwork DDE DSDMNormal1077NetDDEdsdmC:\WINDOWS\system32\netdde.exe00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueNet Logon0Win32_ServiceMaintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.falseNet LogonNormal0NetlogonC:\WINDOWS\system32\lsass.exe4600Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueNetwork Connections0Win32_ServiceManages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. If this service is disabled, you will not be able to view local area network and remote connections and any services that explicitly depend on it will fail to start.falseNetwork ConnectionsNormal0NetmanC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNet.Tcp Port Sharing Service0Win32_ServiceProvides ability to share TCP ports over the net.tcp protocol.falseNet.Tcp Port Sharing ServiceNormal1077NetTcpPortSharing"c:\WINDOWS\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe"00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueNetwork Location Awareness (NLA)0Win32_ServiceCollects and stores network configuration and location information, and notifies applications when this information changes.falseNetwork Location Awareness (NLA)Normal0NlaC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseFile Replication0Win32_ServiceAllows files to be automatically copied and maintained simultaneously on multiple servers. If this service is stopped, file replication will not occur and servers will not synchronize. If this service is disabled, any services that explicitly depend on it will fail to start.falseFile ReplicationIgnore1077NtFrsC:\WINDOWS\system32\ntfrs.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNT LM Security Support Provider0Win32_ServiceProvides security to remote procedure call (RPC) programs that use transports other than named pipes.falseNT LM Security Support ProviderNormal1077NtLmSspC:\WINDOWS\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRemovable Storage0Win32_ServiceManages and catalogs removable media and operates automated removable media devices. If this service is stopped, programs that are dependent on Removable Storage, such as Backup and Remote Storage, will operate more slowly. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemovable StorageNormal1077NtmsSvcC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNVIDIA Driver Helper Service0Win32_ServicetrueNVIDIA Driver Helper ServiceNormal0NVSvcC:\WINDOWS\system32\nvsvc64.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNVIDIA WMI Provider0Win32_ServicefalseNVIDIA WMI ProviderNormal1068NVWMIC:\WINDOWS\system32\nvwmi64.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalsePlug and Play0Win32_ServiceEnables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.falsePlug and PlayNormal0PlugPlayC:\WINDOWS\system32\services.exe4480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueIPSEC Services0Win32_ServiceProvides end-to-end security between clients and servers on TCP/IP networks. If this service is stopped, TCP/IP security between clients and servers on the network will be impaired. If this service is disabled, any services that explicitly depend on it will fail to start.falseIPSEC ServicesNormal0PolicyAgentC:\WINDOWS\system32\lsass.exe4600Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueProtected Storage0Win32_ServiceProtects storage of sensitive information, such as private keys, and prevents access by unauthorized services, processes, or users. If this service is stopped, protected storage will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.trueProtected StorageNormal0ProtectedStorageC:\WINDOWS\system32\lsass.exe4600Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRemote Access Auto Connection Manager0Win32_ServiceCreates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.falseRemote Access Auto Connection ManagerNormal1077RasAutoC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueRemote Access Connection Manager0Win32_ServiceCreates a network connection.falseRemote Access Connection ManagerNormal0RasManC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRemote Desktop Help Session Manager0Win32_ServiceManages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box.falseRemote Desktop Help Session ManagerNormal1077RDSessMgrC:\WINDOWS\system32\sessmgr.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRouting and Remote Access0Win32_ServiceOffers routing services to businesses in local area and wide area network environments.falseRouting and Remote AccessNormal1077RemoteAccessC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueRemote Registry0Win32_ServiceEnables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemote RegistryNormal0RemoteRegistryC:\WINDOWS\system32\svchost.exe -k regsvc13280Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRemote Procedure Call (RPC) Locator0Win32_ServiceEnables remote procedure call (RPC) clients using the RpcNs* family of APIs to locate RPC servers. If this service is stopped or disabled, RPC clients using RpcNs* APIs may be unable to locate servers or fail to start. RpcNs* APIs are not used internally in Windows.falseRemote Procedure Call (RPC) LocatorNormal1077RpcLocatorC:\WINDOWS\system32\locator.exe00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRemote Procedure Call (RPC)0Win32_ServiceServes as the endpoint mapper and COM Service Control Manager. If this service is stopped or disabled, programs using COM or Remote Procedure Call (RPC) services will not function properly.falseRemote Procedure Call (RPC)Normal0RpcSsC:\WINDOWS\system32\svchost.exe -k rpcss7360Own ProcesstrueAutoNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseResultant Set of Policy Provider0Win32_ServiceEnables a user to connect to a remote computer, access the Windows Management Instrumentation database for that computer, and either verify the current Group Policy settings made for the computer or check settings before they are applied. If this service is stopped, remote verification will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseResultant Set of Policy ProviderNormal1077RSoPProvC:\WINDOWS\system32\RSoPProv.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseSpecial Administration Console Helper0Win32_ServiceAllows administrators to remotely access a command prompt using Emergency Management Services.falseSpecial Administration Console HelperNormal1077sacsvrC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseSecurity Accounts Manager0Win32_ServiceThe startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.falseSecurity Accounts ManagerNormal0SamSsC:\WINDOWS\system32\lsass.exe4600Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseSmart Card0Win32_ServiceManages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.falseSmart CardIgnore1077SCardSvrC:\WINDOWS\System32\SCardSvr.exe00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueTask Scheduler0Win32_ServiceEnables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.falseTask SchedulerNormal0ScheduleC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueSecondary Logon0Win32_ServiceEnables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseSecondary LogonIgnore0seclogonC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueSystem Event Notification0Win32_ServiceMonitors system events and notifies subscribers to COM+ Event System of these events. If this service is stopped, COM+ Event System subscribers will not receive system event notifications. If this service is disabled, any services that explicitly depend on it will fail to start.falseSystem Event NotificationNormal0SENSC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWindows Firewall/Internet Connection Sharing (ICS)0Win32_ServiceProvides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.falseWindows Firewall/Internet Connection Sharing (ICS)Normal0SharedAccessC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueShell Hardware Detection0Win32_ServiceProvides notifications for AutoPlay hardware events.falseShell Hardware DetectionIgnore0ShellHWDetectionC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetruePrint Spooler0Win32_ServiceManages all local and network print queues and controls all printing jobs. If this service is stopped, printing on the local machine will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.truePrint SpoolerNormal0SpoolerC:\WINDOWS\system32\spoolsv.exe10200Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Image Acquisition (WIA)0Win32_ServiceProvides image acquisition services for scanners and cameras.falseWindows Image Acquisition (WIA)Normal1077stisvcC:\WINDOWS\system32\svchost.exe -k imgsvc00Own ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseMicrosoft Software Shadow Copy Provider0Win32_ServiceManages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.falseMicrosoft Software Shadow Copy ProviderNormal1077swprvC:\WINDOWS\System32\svchost.exe -k swprv00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalsePerformance Logs and Alerts0Win32_ServiceCollects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.falsePerformance Logs and AlertsNormal0SysmonLogC:\WINDOWS\system32\smlogsvc.exe00Own ProcessfalseAutoNT Authority\NetworkServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueTelephony0Win32_ServiceProvides Telephony API (TAPI) support for clients using programs that control telephony devices and IP-based voice connections. If this service is stopped, the function of all dependent programs will be impaired. If this service is disabled, any services that explicitly depend on it will fail to start.falseTelephonyNormal0TapiSrvC:\WINDOWS\System32\svchost.exe -k tapisrv22800Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseTerminal Services0Win32_ServiceAllows users to connect interactively to a remote computer. Remote Desktop, Fast User Switching, Remote Assistance, and Terminal Server depend on this service - stopping or disabling this service may make your computer unreliable. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.falseTerminal ServicesNormal0TermServiceC:\WINDOWS\System32\svchost.exe -k termsvcs20080Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseThemes0Win32_ServiceProvides user experience theme management.falseThemesNormal1077ThemesC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseTelnet0Win32_ServiceEnables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseTelnetNormal1077TlntSvrC:\WINDOWS\system32\tlntsvr.exe00Own ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseDistributed Link Tracking Server0Win32_ServiceEnables the Distributed Link Tracking Client service within the same domain to provide more reliable and efficient maintenance of links within the domain. If this service is disabled, any services that explicitly depend on it will fail to start.falseDistributed Link Tracking ServerNormal1077TrkSvrC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueDistributed Link Tracking Client0Win32_ServiceEnables client programs to track linked files that are moved within an NTFS volume, to another NTFS volume on the same computer, or to an NTFS volume on another computer. If this service is stopped, the links on this computer will not be maintained or tracked. If this service is disabled, any services that explicitly depend on it will fail to start.falseDistributed Link Tracking ClientNormal0TrkWksC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseTerminal Services Session Directory0Win32_ServiceEnables a user connection request to be routed to the appropriate terminal server in a cluster. If this service is stopped, connection requests will be routed to the first available server.falseTerminal Services Session DirectoryNormal1077TssdisC:\WINDOWS\System32\tssdis.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows User Mode Driver Framework0Win32_ServiceEnables Windows user mode drivers.falseWindows User Mode Driver FrameworkNormal1077UMWdfC:\WINDOWS\system32\wdfmgr.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseUninterruptible Power Supply0Win32_ServiceManages an uninterruptible power supply (UPS) connected to the computer.falseUninterruptible Power SupplyNormal1077UPSC:\WINDOWS\System32\ups.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseVirtual Disk Service0Win32_ServiceProvides software volume and hardware volume management service.falseVirtual Disk ServiceNormal1077vdsC:\WINDOWS\System32\vds.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueVolume Shadow Copy0Win32_ServiceManages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.falseVolume Shadow CopyNormal0VSSC:\WINDOWS\System32\vssvc.exe24920Own ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWindows Time0Win32_ServiceMaintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. falseWindows TimeNormal0W32TimeC:\WINDOWS\system32\svchost.exe -k LocalService8360Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWebClient0Win32_ServiceEnables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.falseWebClientNormal1077WebClientC:\WINDOWS\system32\svchost.exe -k LocalService00Own ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWindows Event Collector0Win32_ServiceCollects software and hardware events from local and remote machines.falseWindows Event CollectorNormal0WecsvcC:\WINDOWS\system32\svchost.exe -k wecsvc14320Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWinHTTP Web Proxy Auto-Discovery Service0Win32_ServiceImplements the Web Proxy Auto-Discovery (WPAD) protocol for Windows HTTP Services (WinHTTP). WPAD is a protocol to enable an HTTP client to automatically discover a proxy configuration. If this service is stopped or disabled, the WPAD protocol will be executed within the HTTP client's process instead of an external service process; there would be no loss of functionality as a result.falseWinHTTP Web Proxy Auto-Discovery ServiceNormal0WinHttpAutoProxySvcC:\WINDOWS\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueWindows Management Instrumentation0Win32_ServiceProvides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows Management InstrumentationIgnore0winmgmtC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWindows Remote Management (WS-Management)0Win32_ServiceAllows access to management information from local and remote machines.falseWindows Remote Management (WS-Management)Normal0WinRMC:\WINDOWS\system32\svchost.exe -k WINRM14600Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalsePortable Media Serial Number Service0Win32_ServiceRetrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device.falsePortable Media Serial Number ServiceNormal1077WmdmPmSNC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWindows Management Instrumentation Driver Extensions0Win32_ServiceMonitors all drivers and event trace providers that are configured to publish Windows Management Instrumentation (WMI) or event trace information. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows Management Instrumentation Driver ExtensionsNormal0WmiC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWMI Performance Adapter0Win32_ServiceProvides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated.falseWMI Performance AdapterNormal1077WmiApSrvC:\WINDOWS\system32\wbem\wmiapsrv.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Presentation Foundation Font Cache 4.0.0.00Win32_ServiceOptimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.falseWindows Presentation Foundation Font Cache 4.0.0.0Normal1077WPFFontCache_v0400C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Search0Win32_ServiceProvides content indexing and property caching for file, email and other content (via extensibility APIs). The service responds to file and email notifications to index modified content. If the service is stopped or disabled, the Explorer will not be able to display virtual folder views of items, and search in the Explorer will fall back to item-by-item slow search.falseWindows SearchNormal1077WSearchC:\WINDOWS\system32\SearchIndexer.exe /Embedding00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueAutomatic Updates0Win32_ServiceEnables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site.falseAutomatic UpdatesNormal0wuauservC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWireless Configuration0Win32_ServiceEnables automatic configuration for IEEE 802.11 adapters. If this service is stopped, automatic configuration will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWireless ConfigurationNormal0WZCSVCC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueCitrix Tools for Virtual Machines Service0Win32_ServiceMonitors and provides various metrics to XenStorefalseCitrix Tools for Virtual Machines ServiceNormal0xensvc"C:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe"18160Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNetwork Provisioning Service0Win32_ServiceManages XML configuration files on a domain basis for automatic network provisioning.falseNetwork Provisioning ServiceNormal1077xmlprovC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Service_star_000.xml000066400000000000000000004445621305406262000253340ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:70AFE2DB-9502-4972-84AD-CD1552284A7Dhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959falsefalseApplication Experience Lookup Service0Win32_ServiceProcess application compatibility lookup requests for applications as they are launched.falseApplication Experience Lookup ServiceNormal0AeLookupSvcC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseAlerter0Win32_ServiceNotifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start.falseAlerterNormal1077AlerterC:\WINDOWS\system32\svchost.exe -k LocalService00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueApplication Layer Gateway Service0Win32_ServiceProvides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows FirewallfalseApplication Layer Gateway ServiceNormal0ALGC:\WINDOWS\System32\alg.exe20320Own ProcesstrueManualNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseApplication Management0Win32_ServiceProcesses installation, removal, and enumeration requests for Active Directory IntelliMirror group policy programs. If the service is disabled, users will be unable to install, remove, or enumerate any IntelliMirror programs. If this service is disabled, any services that explicitly depend on it will fail to start.falseApplication ManagementNormal1077AppMgmtC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseASP.NET State Service0Win32_ServiceProvides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start.falseASP.NET State ServiceNormal1077aspnet_stateC:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Audio0Win32_ServiceManages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows AudioNormal1077AudioSrvC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseBackground Intelligent Transfer Service0Win32_ServiceTransfers files in the background using idle network bandwidth. If the service is stopped, features such as Windows Update, and MSN Explorer will be unable to automatically download programs and other information. If this service is disabled, any services that explicitly depend on it may fail to transfer files if they do not have a fail safe mechanism to transfer files directly through IE in case BITS has been disabled.falseBackground Intelligent Transfer ServiceNormal1077BITSC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueComputer Browser0Win32_ServiceMaintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.falseComputer BrowserNormal0BrowserC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseCloudFormation cfn-hup0Win32_ServiceCloudFormation cfn-hup for WindowsfalseCloudFormation cfn-hupIgnore1077cfn-hup"c:\Program Files\Amazon\cfn-bootstrap\winhup.exe"00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseIndexing Service0Win32_ServiceIndexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language.falseIndexing ServiceNormal1077CiSvcC:\WINDOWS\system32\cisvc.exe00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseClipBook0Win32_ServiceEnables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start.falseClipBookNormal1077ClipSrvC:\WINDOWS\system32\clipsrv.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalse.NET Runtime Optimization Service v2.0.50727_X860Win32_ServiceMicrosoft .NET Framework NGENfalse.NET Runtime Optimization Service v2.0.50727_X86Ignore1077clr_optimization_v2.0.50727_32C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalse.NET Runtime Optimization Service v2.0.50727_x640Win32_ServiceMicrosoft .NET Framework NGENfalse.NET Runtime Optimization Service v2.0.50727_x64Ignore1077clr_optimization_v2.0.50727_64C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseMicrosoft .NET Framework NGEN v4.0.30319_X860Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v4.0.30319_X86Ignore0clr_optimization_v4.0.30319_32C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseMicrosoft .NET Framework NGEN v4.0.30319_X640Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v4.0.30319_X64Ignore0clr_optimization_v4.0.30319_64C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseCOM+ System Application0Win32_ServiceManages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ System ApplicationNormal1077COMSysAppC:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueCryptographic Services0Win32_ServiceProvides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCryptographic ServicesNormal0CryptSvcC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseDCOM Server Process Launcher0Win32_ServiceProvides launch functionality for DCOM services.falseDCOM Server Process LauncherNormal0DcomLaunchC:\WINDOWS\system32\svchost.exe -k DcomLaunch6800Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseDistributed File System0Win32_ServiceIntegrates disparate file shares into a single, logical namespace and manages these logical volumes distributed across a local or wide area network. If this service is stopped, users will be unable to access file shares. If this service is disabled, any services that explicitly depend on it will fail to start.falseDistributed File SystemNormal1077DfsC:\WINDOWS\system32\Dfssvc.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueDHCP Client0Win32_ServiceRegisters and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.falseDHCP ClientNormal0DhcpC:\WINDOWS\system32\svchost.exe -k NetworkService8000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseLogical Disk Manager Administrative Service0Win32_ServiceConfigures hard disk drives and volumes. The service only runs for configuration processes and then stops.falseLogical Disk Manager Administrative ServiceNormal1077dmadminC:\WINDOWS\System32\dmadmin.exe /com00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueLogical Disk Manager0Win32_ServiceDetects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start.falseLogical Disk ManagerNormal0dmserverC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueDNS Client0Win32_ServiceResolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start.falseDNS ClientNormal0DnscacheC:\WINDOWS\system32\svchost.exe -k NetworkService8000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueEc2Config0Win32_ServiceEc2 Configuration ServicefalseEc2ConfigNormal0Ec2Config"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"17160Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueError Reporting Service0Win32_ServiceCollects, stores, and reports unexpected application crashes to Microsoft. If this service is stopped, then Error Reporting will occur only for kernel faults and some types of user mode faults. If this service is disabled, any services that explicitly depend on it will not start.falseError Reporting ServiceIgnore0ERSvcC:\WINDOWS\System32\svchost.exe -k WinErr12240Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseEvent Log0Win32_ServiceEnables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped.falseEvent LogNormal0EventlogC:\WINDOWS\system32\services.exe4480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueCOM+ Event System0Win32_ServiceSupports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ Event SystemNormal0EventSystemC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Presentation Foundation Font Cache 3.0.0.00Win32_ServiceOptimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.falseWindows Presentation Foundation Font Cache 3.0.0.0Normal1077FontCache3.0.0.0C:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueHelp and Support0Win32_ServiceEnables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseHelp and SupportNormal0helpsvcC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseHuman Interface Device Access0Win32_ServiceEnables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.falseHuman Interface Device AccessNormal1077HidServC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueHTTP SSL0Win32_ServiceThis service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start.falseHTTP SSLNormal0HTTPFilterC:\WINDOWS\System32\lsass.exe4600Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseIAS Jet Database Access0Win32_ServiceConfigures Internet Authentication Service (IAS). If this service is stopped, remote network access that requires user authentication will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseIAS Jet Database AccessNormal1077IASJetC:\WINDOWS\SysWOW64\svchost.exe -k iasjet00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows CardSpace0Win32_ServiceSecurely enables the creation, management, and disclosure of digital identities.falseWindows CardSpaceNormal1077idsvc"C:\WINDOWS\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe"00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseIMAPI CD-Burning COM Service0Win32_ServiceManages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start.falseIMAPI CD-Burning COM ServiceNormal1077ImapiServiceC:\WINDOWS\system32\imapi.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseIntersite Messaging0Win32_ServiceEnables messages to be exchanged between computers running Windows Server sites. If this service is stopped, messages will not be exchanged, nor will site routing information be calculated for other services. If this service is disabled, any services that explicitly depend on it will fail to start.falseIntersite MessagingNormal1077IsmServC:\WINDOWS\System32\ismserv.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseKerberos Key Distribution Center0Win32_ServiceOn domain controllers this service enables users to log on to the network using the Kerberos authentication protocol. If this service is stopped on a domain controller, users will be unable to log on to the network. If this service is disabled, any services that explicitly depend on it will fail to start.falseKerberos Key Distribution CenterNormal1077kdcC:\WINDOWS\System32\lsass.exe00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueServer0Win32_ServiceSupports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseServerNormal0lanmanserverC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueWorkstation0Win32_ServiceCreates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWorkstationNormal0lanmanworkstationC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseLicense Logging0Win32_ServiceMonitors and records client access licensing for portions of the operating system (such as IIS, Terminal Server and File/Print) as well as products that aren't a part of the OS, like SQL and Exchange Server. If this service is stopped, licensing will be enforced, but will not be monitored.falseLicense LoggingNormal1077LicenseServiceC:\WINDOWS\System32\llssrv.exe00Own ProcessfalseDisabledNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueTCP/IP NetBIOS Helper0Win32_ServiceProvides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseTCP/IP NetBIOS HelperNormal0LmHostsC:\WINDOWS\system32\svchost.exe -k LocalService8360Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseMessenger0Win32_ServiceTransmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start.falseMessengerNormal1077MessengerC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNetMeeting Remote Desktop Sharing0Win32_ServiceEnables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.trueNetMeeting Remote Desktop SharingNormal1077mnmsrvcC:\WINDOWS\system32\mnmsrvc.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueDistributed Transaction Coordinator0Win32_ServiceCoordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. falseDistributed Transaction CoordinatorNormal0MSDTCC:\WINDOWS\system32\msdtc.exe10480Own ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Installer0Win32_ServiceAdds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows InstallerNormal1077MSIServerC:\WINDOWS\system32\msiexec.exe /V00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNetwork DDE0Win32_ServiceProvides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseNetwork DDENormal1077NetDDEC:\WINDOWS\system32\netdde.exe00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNetwork DDE DSDM0Win32_ServiceManages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. falseNetwork DDE DSDMNormal1077NetDDEdsdmC:\WINDOWS\system32\netdde.exe00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueNet Logon0Win32_ServiceMaintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.falseNet LogonNormal0NetlogonC:\WINDOWS\system32\lsass.exe4600Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueNetwork Connections0Win32_ServiceManages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. If this service is disabled, you will not be able to view local area network and remote connections and any services that explicitly depend on it will fail to start.falseNetwork ConnectionsNormal0NetmanC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNet.Tcp Port Sharing Service0Win32_ServiceProvides ability to share TCP ports over the net.tcp protocol.falseNet.Tcp Port Sharing ServiceNormal1077NetTcpPortSharing"c:\WINDOWS\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe"00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueNetwork Location Awareness (NLA)0Win32_ServiceCollects and stores network configuration and location information, and notifies applications when this information changes.falseNetwork Location Awareness (NLA)Normal0NlaC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseFile Replication0Win32_ServiceAllows files to be automatically copied and maintained simultaneously on multiple servers. If this service is stopped, file replication will not occur and servers will not synchronize. If this service is disabled, any services that explicitly depend on it will fail to start.falseFile ReplicationIgnore1077NtFrsC:\WINDOWS\system32\ntfrs.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNT LM Security Support Provider0Win32_ServiceProvides security to remote procedure call (RPC) programs that use transports other than named pipes.falseNT LM Security Support ProviderNormal1077NtLmSspC:\WINDOWS\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRemovable Storage0Win32_ServiceManages and catalogs removable media and operates automated removable media devices. If this service is stopped, programs that are dependent on Removable Storage, such as Backup and Remote Storage, will operate more slowly. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemovable StorageNormal1077NtmsSvcC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNVIDIA Driver Helper Service0Win32_ServicetrueNVIDIA Driver Helper ServiceNormal0NVSvcC:\WINDOWS\system32\nvsvc64.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNVIDIA WMI Provider0Win32_ServicefalseNVIDIA WMI ProviderNormal1068NVWMIC:\WINDOWS\system32\nvwmi64.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalsePlug and Play0Win32_ServiceEnables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.falsePlug and PlayNormal0PlugPlayC:\WINDOWS\system32\services.exe4480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueIPSEC Services0Win32_ServiceProvides end-to-end security between clients and servers on TCP/IP networks. If this service is stopped, TCP/IP security between clients and servers on the network will be impaired. If this service is disabled, any services that explicitly depend on it will fail to start.falseIPSEC ServicesNormal0PolicyAgentC:\WINDOWS\system32\lsass.exe4600Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueProtected Storage0Win32_ServiceProtects storage of sensitive information, such as private keys, and prevents access by unauthorized services, processes, or users. If this service is stopped, protected storage will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.trueProtected StorageNormal0ProtectedStorageC:\WINDOWS\system32\lsass.exe4600Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRemote Access Auto Connection Manager0Win32_ServiceCreates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.falseRemote Access Auto Connection ManagerNormal1077RasAutoC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueRemote Access Connection Manager0Win32_ServiceCreates a network connection.falseRemote Access Connection ManagerNormal0RasManC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRemote Desktop Help Session Manager0Win32_ServiceManages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box.falseRemote Desktop Help Session ManagerNormal1077RDSessMgrC:\WINDOWS\system32\sessmgr.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRouting and Remote Access0Win32_ServiceOffers routing services to businesses in local area and wide area network environments.falseRouting and Remote AccessNormal1077RemoteAccessC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueRemote Registry0Win32_ServiceEnables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemote RegistryNormal0RemoteRegistryC:\WINDOWS\system32\svchost.exe -k regsvc13280Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRemote Procedure Call (RPC) Locator0Win32_ServiceEnables remote procedure call (RPC) clients using the RpcNs* family of APIs to locate RPC servers. If this service is stopped or disabled, RPC clients using RpcNs* APIs may be unable to locate servers or fail to start. RpcNs* APIs are not used internally in Windows.falseRemote Procedure Call (RPC) LocatorNormal1077RpcLocatorC:\WINDOWS\system32\locator.exe00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseRemote Procedure Call (RPC)0Win32_ServiceServes as the endpoint mapper and COM Service Control Manager. If this service is stopped or disabled, programs using COM or Remote Procedure Call (RPC) services will not function properly.falseRemote Procedure Call (RPC)Normal0RpcSsC:\WINDOWS\system32\svchost.exe -k rpcss7360Own ProcesstrueAutoNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseResultant Set of Policy Provider0Win32_ServiceEnables a user to connect to a remote computer, access the Windows Management Instrumentation database for that computer, and either verify the current Group Policy settings made for the computer or check settings before they are applied. If this service is stopped, remote verification will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseResultant Set of Policy ProviderNormal1077RSoPProvC:\WINDOWS\system32\RSoPProv.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseSpecial Administration Console Helper0Win32_ServiceAllows administrators to remotely access a command prompt using Emergency Management Services.falseSpecial Administration Console HelperNormal1077sacsvrC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseSecurity Accounts Manager0Win32_ServiceThe startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.falseSecurity Accounts ManagerNormal0SamSsC:\WINDOWS\system32\lsass.exe4600Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseSmart Card0Win32_ServiceManages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.falseSmart CardIgnore1077SCardSvrC:\WINDOWS\System32\SCardSvr.exe00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueTask Scheduler0Win32_ServiceEnables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.falseTask SchedulerNormal0ScheduleC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueSecondary Logon0Win32_ServiceEnables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseSecondary LogonIgnore0seclogonC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueSystem Event Notification0Win32_ServiceMonitors system events and notifies subscribers to COM+ Event System of these events. If this service is stopped, COM+ Event System subscribers will not receive system event notifications. If this service is disabled, any services that explicitly depend on it will fail to start.falseSystem Event NotificationNormal0SENSC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWindows Firewall/Internet Connection Sharing (ICS)0Win32_ServiceProvides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.falseWindows Firewall/Internet Connection Sharing (ICS)Normal0SharedAccessC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueShell Hardware Detection0Win32_ServiceProvides notifications for AutoPlay hardware events.falseShell Hardware DetectionIgnore0ShellHWDetectionC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetruePrint Spooler0Win32_ServiceManages all local and network print queues and controls all printing jobs. If this service is stopped, printing on the local machine will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.truePrint SpoolerNormal0SpoolerC:\WINDOWS\system32\spoolsv.exe10200Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Image Acquisition (WIA)0Win32_ServiceProvides image acquisition services for scanners and cameras.falseWindows Image Acquisition (WIA)Normal1077stisvcC:\WINDOWS\system32\svchost.exe -k imgsvc00Own ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseMicrosoft Software Shadow Copy Provider0Win32_ServiceManages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.falseMicrosoft Software Shadow Copy ProviderNormal1077swprvC:\WINDOWS\System32\svchost.exe -k swprv00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalsePerformance Logs and Alerts0Win32_ServiceCollects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.falsePerformance Logs and AlertsNormal0SysmonLogC:\WINDOWS\system32\smlogsvc.exe00Own ProcessfalseAutoNT Authority\NetworkServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueTelephony0Win32_ServiceProvides Telephony API (TAPI) support for clients using programs that control telephony devices and IP-based voice connections. If this service is stopped, the function of all dependent programs will be impaired. If this service is disabled, any services that explicitly depend on it will fail to start.falseTelephonyNormal0TapiSrvC:\WINDOWS\System32\svchost.exe -k tapisrv22800Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseTerminal Services0Win32_ServiceAllows users to connect interactively to a remote computer. Remote Desktop, Fast User Switching, Remote Assistance, and Terminal Server depend on this service - stopping or disabling this service may make your computer unreliable. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.falseTerminal ServicesNormal0TermServiceC:\WINDOWS\System32\svchost.exe -k termsvcs20080Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseThemes0Win32_ServiceProvides user experience theme management.falseThemesNormal1077ThemesC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseTelnet0Win32_ServiceEnables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseTelnetNormal1077TlntSvrC:\WINDOWS\system32\tlntsvr.exe00Own ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseDistributed Link Tracking Server0Win32_ServiceEnables the Distributed Link Tracking Client service within the same domain to provide more reliable and efficient maintenance of links within the domain. If this service is disabled, any services that explicitly depend on it will fail to start.falseDistributed Link Tracking ServerNormal1077TrkSvrC:\WINDOWS\system32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueDistributed Link Tracking Client0Win32_ServiceEnables client programs to track linked files that are moved within an NTFS volume, to another NTFS volume on the same computer, or to an NTFS volume on another computer. If this service is stopped, the links on this computer will not be maintained or tracked. If this service is disabled, any services that explicitly depend on it will fail to start.falseDistributed Link Tracking ClientNormal0TrkWksC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseTerminal Services Session Directory0Win32_ServiceEnables a user connection request to be routed to the appropriate terminal server in a cluster. If this service is stopped, connection requests will be routed to the first available server.falseTerminal Services Session DirectoryNormal1077TssdisC:\WINDOWS\System32\tssdis.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows User Mode Driver Framework0Win32_ServiceEnables Windows user mode drivers.falseWindows User Mode Driver FrameworkNormal1077UMWdfC:\WINDOWS\system32\wdfmgr.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseUninterruptible Power Supply0Win32_ServiceManages an uninterruptible power supply (UPS) connected to the computer.falseUninterruptible Power SupplyNormal1077UPSC:\WINDOWS\System32\ups.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseVirtual Disk Service0Win32_ServiceProvides software volume and hardware volume management service.falseVirtual Disk ServiceNormal1077vdsC:\WINDOWS\System32\vds.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueVolume Shadow Copy0Win32_ServiceManages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.falseVolume Shadow CopyNormal0VSSC:\WINDOWS\System32\vssvc.exe24920Own ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWindows Time0Win32_ServiceMaintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. falseWindows TimeNormal0W32TimeC:\WINDOWS\system32\svchost.exe -k LocalService8360Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWebClient0Win32_ServiceEnables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.falseWebClientNormal1077WebClientC:\WINDOWS\system32\svchost.exe -k LocalService00Own ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWindows Event Collector0Win32_ServiceCollects software and hardware events from local and remote machines.falseWindows Event CollectorNormal0WecsvcC:\WINDOWS\system32\svchost.exe -k wecsvc14320Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWinHTTP Web Proxy Auto-Discovery Service0Win32_ServiceImplements the Web Proxy Auto-Discovery (WPAD) protocol for Windows HTTP Services (WinHTTP). WPAD is a protocol to enable an HTTP client to automatically discover a proxy configuration. If this service is stopped or disabled, the WPAD protocol will be executed within the HTTP client's process instead of an external service process; there would be no loss of functionality as a result.falseWinHTTP Web Proxy Auto-Discovery ServiceNormal0WinHttpAutoProxySvcC:\WINDOWS\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300truetrueWindows Management Instrumentation0Win32_ServiceProvides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows Management InstrumentationIgnore0winmgmtC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWindows Remote Management (WS-Management)0Win32_ServiceAllows access to management information from local and remote machines.falseWindows Remote Management (WS-Management)Normal0WinRMC:\WINDOWS\system32\svchost.exe -k WINRM14600Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalsePortable Media Serial Number Service0Win32_ServiceRetrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device.falsePortable Media Serial Number ServiceNormal1077WmdmPmSNC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWindows Management Instrumentation Driver Extensions0Win32_ServiceMonitors all drivers and event trace providers that are configured to publish Windows Management Instrumentation (WMI) or event trace information. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows Management Instrumentation Driver ExtensionsNormal0WmiC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWMI Performance Adapter0Win32_ServiceProvides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated.falseWMI Performance AdapterNormal1077WmiApSrvC:\WINDOWS\system32\wbem\wmiapsrv.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Presentation Foundation Font Cache 4.0.0.00Win32_ServiceOptimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.falseWindows Presentation Foundation Font Cache 4.0.0.0Normal1077WPFFontCache_v0400C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseWindows Search0Win32_ServiceProvides content indexing and property caching for file, email and other content (via extensibility APIs). The service responds to file and email notifications to index modified content. If the service is stopped or disabled, the Explorer will not be able to display virtual folder views of items, and search in the Explorer will fall back to item-by-item slow search.falseWindows SearchNormal1077WSearchC:\WINDOWS\system32\SearchIndexer.exe /Embedding00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueAutomatic Updates0Win32_ServiceEnables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site.falseAutomatic UpdatesNormal0wuauservC:\WINDOWS\system32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueWireless Configuration0Win32_ServiceEnables automatic configuration for IEEE 802.11 adapters. If this service is stopped, automatic configuration will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWireless ConfigurationNormal0WZCSVCC:\WINDOWS\System32\svchost.exe -k netsvcs8640Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsetrueCitrix Tools for Virtual Machines Service0Win32_ServiceMonitors and provides various metrics to XenStorefalseCitrix Tools for Virtual Machines ServiceNormal0xensvc"C:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe"18160Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZON-9DC6EF0300falsefalseNetwork Provisioning Service0Win32_ServiceManages XML configuration files on a domain basis for automatic network provisioning.falseNetwork Provisioning ServiceNormal1077xmlprovC:\WINDOWS\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZON-9DC6EF0300txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_SystemEnclosure.properties000066400000000000000000000006331305406262000270470ustar00rootroot00000000000000HotSwappable SKU SerialNumber Width Version Removable PartNumber AudibleAlarm Status Description NumberOfPowerCords Replaceable LockPresent Tag SecurityStatus BreachDescription Manufacturer OtherIdentifyingInfo Name InstallDate VisibleAlarm PoweredOn SMBIOSAssetTag Caption Depth Model CurrentRequiredOrProduced Weight ChassisTypes Height SecurityBreach CableManagementStrategy CreationClassName HeatGeneration txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_SystemEnclosure_all_000.xml000066400000000000000000000036051305406262000266640ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:30FF3CA9-42BD-4E52-ACC6-A7157C6EA8C5http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959System Enclosure1Win32_SystemEnclosureSystem EnclosurefalseXenSystem EnclosureSystem Enclosure 0txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_SystemEnclosure_star_000.xml000066400000000000000000000041631305406262000270650ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:94BB9378-E94D-4609-8E94-69B4CDA34913http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959System Enclosure1Win32_SystemEnclosureSystem EnclosurefalseXenSystem EnclosureSystem Enclosure 0txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Volume.properties000066400000000000000000000010511305406262000251450ustar00rootroot00000000000000Capacity DirtyBitSet Automount SerialNumber Label IndexingEnabled DriveLetter SystemName Access Status PNPDeviceID Description ConfigManagerUserConfig ErrorCleared PowerManagementSupported QuotasEnabled Compressed FileSystem Purpose QuotasIncomplete Name InstallDate BlockSize Caption StatusInfo DeviceID ConfigManagerErrorCode ErrorMethodology DriveType QuotasRebuilding SupportsFileBasedCompression NumberOfBlocks FreeSpace MaximumFileNameLength SupportsDiskQuotas ErrorDescription LastErrorCode CreationClassName Availability SystemCreationClassName txwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Volume_all_000.xml000066400000000000000000000072271305406262000247730ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:B2337C5C-9A81-4327-86E1-FCEBC5D20B69http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959true409626841444352C:\false\\?\Volume{c7d80e4f-8864-11e2-8086-806e6f6e6963}\falseC:3NTFS11447885824truetrue409653683941376D:\false\\?\Volume{a6f03b9d-8a92-11e2-9769-124ace91cd41}\falseD:3NTFS53588971520true255D:\falsefalsefalse1991888029truetruetxwinrm-1.2.7/txwinrm/test/data/server_2003/Win32_Volume_star_000.xml000066400000000000000000000101511305406262000251620ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:79F03FD5-0F51-4EF8-9BA8-C3DFA1E94C3Ahttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959true409626841444352C:\false\\?\Volume{c7d80e4f-8864-11e2-8086-806e6f6e6963}\falseC:3NTFS11447885824true255C:\falsefalsefalse3725233751truetruetrue409653683941376D:\false\\?\Volume{a6f03b9d-8a92-11e2-9769-124ace91cd41}\falseD:3NTFS53588971520trueNew Volume255D:\falsefalsefalse1991888029truetruetxwinrm-1.2.7/txwinrm/test/data/server_2008/000077500000000000000000000000001305406262000206065ustar00rootroot00000000000000txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_ComputerSystem.properties000066400000000000000000000014651305406262000267170ustar00rootroot00000000000000KeyboardPasswordStatus NumberOfProcessors PowerState PowerManagementSupported LastLoadInfo WakeUpType PartOfDomain SystemStartupDelay ResetLimit DomainRole CurrentTimeZone BootOptionOnWatchDog BootROMSupported Description ResetCapability NameFormat ResetCount PauseAfterReset AutomaticResetCapability PCSystemType BootupState Manufacturer PowerOnPasswordStatus Status AdminPasswordStatus Name InstallDate AutomaticResetBootOption Caption SystemStartupSetting NumberOfLogicalProcessors FrontPanelResetStatus BootOptionOnLimit Model AutomaticManagedPagefile PowerSupplyState Workgroup NetworkServerModeEnabled Domain TotalPhysicalMemory ChassisBootupState SystemType DNSHostName UserName InfraredSupported PrimaryOwnerContact Roles DaylightInEffect CreationClassName EnableDaylightSavingsTime ThermalState PrimaryOwnerName txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_ComputerSystem_all_000.xml000066400000000000000000000055541305406262000265350ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:1AC3F615-D1DB-4B50-B413-7D600E928064http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039593falsetruetruetrueNormal bootAMAZONA-Q2R281F3Win32_ComputerSystem0AT/AT COMPATIBLEAMAZONA-Q2R281FWORKGROUP2true3false3XenHVM domUAMAZONA-Q2R281Ftrue11false-10303Amazon1-1-1LM_WorkstationLM_ServerNTServer_NTOKx64-based PC36444728326WORKGROUPtxwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_ComputerSystem_star_000.xml000066400000000000000000000063021305406262000267260ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:AB85F708-F6FF-4590-8B4B-42BFDBEA34E4http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039593falsetruetruetrueNormal bootAMAZONA-Q2R281F3Win32_ComputerSystem0AT/AT COMPATIBLEAMAZONA-Q2R281FWORKGROUP2true3false3XenHVM domUAMAZONA-Q2R281Ftrue11false-10303Amazon1-1-1LM_WorkstationLM_ServerNTServer_NTOKx64-based PC36444728326WORKGROUPtxwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_IP4RouteTable.properties000066400000000000000000000002321305406262000262660ustar00rootroot00000000000000Status Information NextHop Protocol Description InstallDate Metric2 Age Destination Mask InterfaceIndex Metric3 Caption Metric1 Metric5 Metric4 Type Name txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_IP4RouteTable_all_000.xml000066400000000000000000000025151305406262000261070ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:602AC533-9DC9-42D9-BCCD-696848E67FBFhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:C79DB6C6-EB6D-4BEF-B5E8-CCE1FCF9FE98142400.0.0.00.0.0.0 - 0.0.0.0 - 10.30.40.10.0.0.00.0130.0.0.020-1-1-1-10.0.0.010.30.40.134txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_IP4RouteTable_all_001.xml000066400000000000000000000212551305406262000261120ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:0D789547-03A9-4928-9781-CF5373DD7A2Fhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A01424010.30.40.010.30.40.0 - 255.255.255.0 - 0.0.0.010.30.40.00.013255.255.255.0276-1-1-1-110.30.40.00.0.0.0331424010.30.40.6910.30.40.69 - 255.255.255.255 - 0.0.0.010.30.40.690.013255.255.255.255276-1-1-1-110.30.40.690.0.0.0331424010.30.40.25510.30.40.255 - 255.255.255.255 - 0.0.0.010.30.40.2550.013255.255.255.255276-1-1-1-110.30.40.2550.0.0.03314254127.0.0.0127.0.0.0 - 255.0.0.0 - 0.0.0.0127.0.0.00.01255.0.0.0306-1-1-1-1127.0.0.00.0.0.03314254127.0.0.1127.0.0.1 - 255.255.255.255 - 0.0.0.0127.0.0.10.01255.255.255.255306-1-1-1-1127.0.0.10.0.0.03314254127.255.255.255127.255.255.255 - 255.255.255.255 - 0.0.0.0127.255.255.2550.01255.255.255.255306-1-1-1-1127.255.255.2550.0.0.03314219169.254.169.250169.254.169.250 - 255.255.255.255 - 0.0.0.0169.254.169.2500.013255.255.255.25520-1-1-1-1169.254.169.2500.0.0.03314219169.254.169.251169.254.169.251 - 255.255.255.255 - 0.0.0.0169.254.169.2510.013255.255.255.25520-1-1-1-1169.254.169.2510.0.0.03314219169.254.169.254169.254.169.254 - 255.255.255.255 - 0.0.0.0169.254.169.2540.013255.255.255.25520-1-1-1-1169.254.169.2540.0.0.03314254224.0.0.0224.0.0.0 - 240.0.0.0 - 0.0.0.0224.0.0.00.01240.0.0.0306-1-1-1-1224.0.0.00.0.0.03314247224.0.0.0224.0.0.0 - 240.0.0.0 - 0.0.0.0224.0.0.00.013240.0.0.0276-1-1-1-1224.0.0.00.0.0.03314254255.255.255.255255.255.255.255 - 255.255.255.255 - 0.0.0.0255.255.255.2550.01255.255.255.255306-1-1-1-1255.255.255.2550.0.0.03314247255.255.255.255255.255.255.255 - 255.255.255.255 - 0.0.0.0255.255.255.2550.013255.255.255.255276-1-1-1-1255.255.255.2550.0.0.033txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_IP4RouteTable_star_000.xml000066400000000000000000000030351305406262000263060ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:C94FB3F2-3009-48F6-A3B2-8C7C13CA04B8http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:71F4FA33-BDD3-4B96-BFE3-B4F81532D2D7142400.0.0.00.0.0.0 - 0.0.0.0 - 10.30.40.10.0.0.00.0130.0.0.020-1-1-1-10.0.0.010.30.40.134txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_IP4RouteTable_star_001.xml000066400000000000000000000264751305406262000263240ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:4B3C95A8-A6FD-48E5-9FAA-5B925D98BB81http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A01424010.30.40.010.30.40.0 - 255.255.255.0 - 0.0.0.010.30.40.00.013255.255.255.0276-1-1-1-110.30.40.00.0.0.0331424010.30.40.6910.30.40.69 - 255.255.255.255 - 0.0.0.010.30.40.690.013255.255.255.255276-1-1-1-110.30.40.690.0.0.0331424010.30.40.25510.30.40.255 - 255.255.255.255 - 0.0.0.010.30.40.2550.013255.255.255.255276-1-1-1-110.30.40.2550.0.0.03314254127.0.0.0127.0.0.0 - 255.0.0.0 - 0.0.0.0127.0.0.00.01255.0.0.0306-1-1-1-1127.0.0.00.0.0.03314254127.0.0.1127.0.0.1 - 255.255.255.255 - 0.0.0.0127.0.0.10.01255.255.255.255306-1-1-1-1127.0.0.10.0.0.03314254127.255.255.255127.255.255.255 - 255.255.255.255 - 0.0.0.0127.255.255.2550.01255.255.255.255306-1-1-1-1127.255.255.2550.0.0.03314219169.254.169.250169.254.169.250 - 255.255.255.255 - 0.0.0.0169.254.169.2500.013255.255.255.25520-1-1-1-1169.254.169.2500.0.0.03314219169.254.169.251169.254.169.251 - 255.255.255.255 - 0.0.0.0169.254.169.2510.013255.255.255.25520-1-1-1-1169.254.169.2510.0.0.03314219169.254.169.254169.254.169.254 - 255.255.255.255 - 0.0.0.0169.254.169.2540.013255.255.255.25520-1-1-1-1169.254.169.2540.0.0.03314254224.0.0.0224.0.0.0 - 240.0.0.0 - 0.0.0.0224.0.0.00.01240.0.0.0306-1-1-1-1224.0.0.00.0.0.03314247224.0.0.0224.0.0.0 - 240.0.0.0 - 0.0.0.0224.0.0.00.013240.0.0.0276-1-1-1-1224.0.0.00.0.0.03314254255.255.255.255255.255.255.255 - 255.255.255.255 - 0.0.0.0255.255.255.2550.01255.255.255.255306-1-1-1-1255.255.255.2550.0.0.03314247255.255.255.255255.255.255.255 - 255.255.255.255 - 0.0.0.0255.255.255.2550.013255.255.255.255276-1-1-1-1255.255.255.2550.0.0.033txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_LogicalDisk.properties000066400000000000000000000010431305406262000260710ustar00rootroot00000000000000QuotasDisabled ProviderName PowerManagementSupported Access SystemName DriveType Status VolumeDirty PNPDeviceID Description VolumeName ConfigManagerUserConfig ErrorCleared Compressed FileSystem Purpose QuotasIncomplete Name InstallDate BlockSize MediaType Caption StatusInfo DeviceID ConfigManagerErrorCode ErrorMethodology MaximumComponentLength QuotasRebuilding SupportsFileBasedCompression NumberOfBlocks FreeSpace VolumeSerialNumber SupportsDiskQuotas ErrorDescription LastErrorCode CreationClassName Availability SystemCreationClassName Size txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_LogicalDisk_all_000.xml000066400000000000000000000043031305406262000257060ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:0C0F89FC-24AE-4E16-9783-7596689F5639http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:F754F79D-54F8-47F9-AE66-8A83216E47BC0C:falseWin32_LogicalDiskLocal Fixed DiskC:3NTFS976949657625512C:truefalsefalse32210153472truetrueWin32_ComputerSystemAMAZONA-Q2R281FfalseE0E8D7AAtxwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_LogicalDisk_all_001.xml000066400000000000000000000041731305406262000257140ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:9601B076-AA09-4B2B-9CBA-0A62AD086E20http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A00D:falseWin32_LogicalDiskLocal Fixed DiskD:3NTFS5358477721625512D:truefalsefalse53683941376truetrueWin32_ComputerSystemAMAZONA-Q2R281FfalseNew Volume76B9CC9Dtxwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_LogicalDisk_star_000.xml000066400000000000000000000047031305406262000261130ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:F0D7DDA2-27C5-42C4-934E-28F39841563Ehttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:5BB9D3D1-8FF1-40FA-ADA2-BE91F7F050E60C:falseWin32_LogicalDiskLocal Fixed DiskC:3NTFS976949657625512C:truefalsefalse32210153472truetrueWin32_ComputerSystemAMAZONA-Q2R281FfalseE0E8D7AAtxwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_LogicalDisk_star_001.xml000066400000000000000000000045731305406262000261210ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:F257A833-F80A-43BE-BAA2-F9C35C7CE271http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A00D:falseWin32_LogicalDiskLocal Fixed DiskD:3NTFS5358477721625512D:truefalsefalse53683941376truetrueWin32_ComputerSystemAMAZONA-Q2R281FfalseNew Volume76B9CC9Dtxwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_NetworkAdapterConfiguration.properties000066400000000000000000000014771305406262000314010ustar00rootroot00000000000000DHCPLeaseObtained Index WINSEnableLMHostsLookup TcpMaxDataRetransmissions DomainDNSRegistrationEnabled DatabasePath WINSHostLookupFile IPXEnabled TcpWindowSize InterfaceIndex IPUseZeroBroadcast DHCPLeaseExpires Description TcpNumConnections WINSScopeID IPFilterSecurityEnabled DeadGWDetectEnabled TcpMaxConnectRetransmissions ArpAlwaysSourceRoute DHCPEnabled PMTUBHDetectEnabled DNSDomain IPXMediaType KeepAliveInterval PMTUDiscoveryEnabled MTU IPConnectionMetric SettingID ServiceName ForwardBufferMemory FullDNSRegistrationEnabled TcpUseRFC1122UrgentPointer MACAddress ArpUseEtherSNAP DNSEnabledForWINSResolution Caption IPXAddress IGMPLevel NumForwardPackets KeepAliveTime DNSHostName TcpipNetbiosOptions WINSSecondaryServer DefaultTOS IPEnabled IPPortSecurityEnabled DefaultTTL WINSPrimaryServer DHCPServer IPXVirtualNetNumber txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_NetworkAdapterConfiguration_all_000.xml000066400000000000000000000051401305406262000312030ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:1198A1B2-2308-4698-9E50-D1012CFEA923http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:64F5CD0D-0E7A-42CC-811F-EBB6D0BEF5F8[00000000] WAN Miniport (SSTP)WAN Miniport (SSTP)false02falseRasSstp{4AE6B55C-6DD6-427D-A5BB-13535D4BE926}txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_NetworkAdapterConfiguration_all_001.xml000066400000000000000000000622601305406262000312120ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:E39917F8-D2EF-4B38-9157-FBE97CA9585Fhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0[00000001] WAN Miniport (IKEv2)WAN Miniport (IKEv2)false110falseRasAgileVpn{FB474E6C-F93F-4848-945E-86780D2A9897}[00000002] WAN Miniport (L2TP)WAN Miniport (L2TP)false23falseRasl2tp{66973E50-CF44-46A7-AD86-0F369D30ACA2}[00000003] WAN Miniport (PPTP)WAN Miniport (PPTP)false34falsePptpMiniport{F93EB786-8968-43C5-BC58-54D87385060E}[00000004] WAN Miniport (PPPOE)WAN Miniport (PPPOE)false45falseRasPppoe{6A16EDEB-24DF-416A-B427-CED88EFCA006}[00000005] WAN Miniport (IPv6)WAN Miniport (IPv6)false56falseNdisWan{F4373218-ED19-4F3D-8DB4-982009ED86B7}[00000006] WAN Miniport (Network Monitor)WAN Miniport (Network Monitor)false67falseNdisWan{5356FE17-48EE-4A7A-BECE-645E20060A52}[00000007] RedHat PV NIC DriverRedHat PV NIC Drivertrue711falserhelnet{F5D1F2B1-E780-413F-B977-7E589F532649}[00000008] Microsoft ISATAP AdapterMicrosoft ISATAP Adapterfalse814falsetunnel{13460201-9AEB-4E2B-9C15-E3EB2BD1FB54}[00000009] WAN Miniport (IP)WAN Miniport (IP)false98falseNdisWan{66513FCE-F1B9-480C-B278-3DD588D5D452}[00000010] Microsoft Teredo Tunneling AdapterMicrosoft Teredo Tunneling Adapterfalse1012falsetunnel{3EBB0198-AD8E-48DE-8C98-3668E4288CFE}[00000011] RAS Async AdapterRAS Async Adapterfalse119false20:41:53:59:4E:FFAsyncMac{DD2F4800-0DEB-4A98-A302-0777CB955DC1}[00000012] RedHat PV NIC Driver%SystemRoot%\System32\drivers\etcRedHat PV NIC Driver #2true2013-04-15T20:58:55Z2013-04-15T19:58:55Z10.30.40.1solutions.locfalseAMAZONA-Q2R281Ffalsetrue121320truefalse12:4A:CE:A2:C9:F2rhelnet{DFE26102-5F9C-4861-8331-516F4DECDF88}0true10.30.1.10[00000013] Microsoft ISATAP AdapterMicrosoft ISATAP Adapterfalse1315falsetunnel{3BA3616F-179E-40C9-9669-62E1B8DA027A}txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_NetworkAdapterConfiguration_star_000.xml000066400000000000000000000056301305406262000314100ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:CC664B0C-FCED-4B66-A5AC-7E200B3A1425http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:42EBC4F2-7C3B-4C6F-9491-2C57C22F8695[00000000] WAN Miniport (SSTP)WAN Miniport (SSTP)false02falseRasSstp{4AE6B55C-6DD6-427D-A5BB-13535D4BE926}txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_NetworkAdapterConfiguration_star_001.xml000066400000000000000000000733441305406262000314200ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:CBAF6871-9E6E-4334-A923-E0FA7EAF9EE9http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0[00000001] WAN Miniport (IKEv2)WAN Miniport (IKEv2)false110falseRasAgileVpn{FB474E6C-F93F-4848-945E-86780D2A9897}[00000002] WAN Miniport (L2TP)WAN Miniport (L2TP)false23falseRasl2tp{66973E50-CF44-46A7-AD86-0F369D30ACA2}[00000003] WAN Miniport (PPTP)WAN Miniport (PPTP)false34falsePptpMiniport{F93EB786-8968-43C5-BC58-54D87385060E}[00000004] WAN Miniport (PPPOE)WAN Miniport (PPPOE)false45falseRasPppoe{6A16EDEB-24DF-416A-B427-CED88EFCA006}[00000005] WAN Miniport (IPv6)WAN Miniport (IPv6)false56falseNdisWan{F4373218-ED19-4F3D-8DB4-982009ED86B7}[00000006] WAN Miniport (Network Monitor)WAN Miniport (Network Monitor)false67falseNdisWan{5356FE17-48EE-4A7A-BECE-645E20060A52}[00000007] RedHat PV NIC DriverRedHat PV NIC Drivertrue711falserhelnet{F5D1F2B1-E780-413F-B977-7E589F532649}[00000008] Microsoft ISATAP AdapterMicrosoft ISATAP Adapterfalse814falsetunnel{13460201-9AEB-4E2B-9C15-E3EB2BD1FB54}[00000009] WAN Miniport (IP)WAN Miniport (IP)false98falseNdisWan{66513FCE-F1B9-480C-B278-3DD588D5D452}[00000010] Microsoft Teredo Tunneling AdapterMicrosoft Teredo Tunneling Adapterfalse1012falsetunnel{3EBB0198-AD8E-48DE-8C98-3668E4288CFE}[00000011] RAS Async AdapterRAS Async Adapterfalse119false20:41:53:59:4E:FFAsyncMac{DD2F4800-0DEB-4A98-A302-0777CB955DC1}[00000012] RedHat PV NIC Driver%SystemRoot%\System32\drivers\etc10.30.40.1RedHat PV NIC Driver #2true2013-04-15T20:58:55Z2013-04-15T19:58:55Z10.30.40.1solutions.locec2.internalus-east-1.ec2-utilities.amazonaws.comcompute-1.internalsolutions.locfalseAMAZONA-Q2R281F10.30.1.10falsetrue0121310.30.40.6920truefalse255.255.255.012:4A:CE:A2:C9:F2rhelnet{DFE26102-5F9C-4861-8331-516F4DECDF88}0true10.30.1.10[00000013] Microsoft ISATAP AdapterMicrosoft ISATAP Adapterfalse1315falsetunnel{3BA3616F-179E-40C9-9669-62E1B8DA027A}txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_OperatingSystem.properties000066400000000000000000000017701305406262000270500ustar00rootroot00000000000000WindowsDirectory LastBootUpTime MaxProcessMemorySize MaxNumberOfProcesses NumberOfProcesses DataExecutionPrevention_Available CSName SystemDrive SerialNumber MUILanguages CreationClassName CSCreationClassName Debug SizeStoredInPagingFiles FreeSpaceInPagingFiles ProductType Organization OSType CurrentTimeZone SystemDirectory RegisteredUser Status BuildNumber FreePhysicalMemory CountryCode OSArchitecture ForegroundApplicationBoost PlusProductID PAEEnabled OSLanguage DataExecutionPrevention_Drivers NumberOfUsers NumberOfLicensedUsers DataExecutionPrevention_SupportPolicy TotalSwapSpaceSize Manufacturer BuildType CSDVersion FreeVirtualMemory SuiteMask InstallDate Distributed TotalVirtualMemorySize Caption EncryptionLevel LocalDateTime OtherTypeDescription SystemDevice OSProductSuite PlusVersionNumber Description OperatingSystemSKU Locale BootDevice Primary ServicePackMajorVersion Version LargeSystemCache CodeSet ServicePackMinorVersion Name DataExecutionPrevention_32BitApplications TotalVisibleMemorySize txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_OperatingSystem_all_000.xml000066400000000000000000000071731305406262000266660ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:9612940A-1635-44B5-8A9C-6AA4F2BC4380http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959\Device\HarddiskVolume17601Multiprocessor FreeMicrosoft Windows Server 2008 R2 Datacenter 12521Win32_OperatingSystemWin32_ComputerSystemService Pack 1AMAZONA-Q2R281F0truetruetrue3falsefalse2560183808838656085389122013-03-09T03:06:25Z2013-04-15T16:28:39.5Z2013-04-15T20:26:12.795Z0409Microsoft Corporation42949672958589934464en-USMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition104218Amazon.com64-bit103340018true3Amazon00496-001-0001283-84650108388608OK400\Device\HarddiskVolume1C:\Windows\system32C:90179766293686.1.7601C:\Windowstxwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_OperatingSystem_star_000.xml000066400000000000000000000100271305406262000270570ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:52E403AF-C72F-4293-97D7-F1A1CFA39CC1http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959\Device\HarddiskVolume17601Multiprocessor FreeMicrosoft Windows Server 2008 R2 Datacenter 12521Win32_OperatingSystemWin32_ComputerSystemService Pack 1AMAZONA-Q2R281F0truetruetrue3falsefalse2560184040838656085391002013-03-09T03:06:25Z2013-04-15T16:28:39.5Z2013-04-15T20:26:12.701Z0409Microsoft Corporation42949672958589934464en-USMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition104218Amazon.com64-bit103340018true3Amazon00496-001-0001283-84650108388608OK400\Device\HarddiskVolume1C:\Windows\system32C:90179766293686.1.7601C:\Windowstxwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_PerfDisk_PhysicalDisk.properties000066400000000000000000000014301305406262000323020ustar00rootroot00000000000000PercentDiskReadTime_Base DiskBytesPersec Timestamp_Object AvgDisksecPerTransfer_Base AvgDiskBytesPerTransfer Description PercentIdleTime AvgDiskQueueLength Frequency_Sys100NS DiskWriteBytesPersec AvgDiskBytesPerTransfer_Base Timestamp_Sys100NS DiskWritesPersec PercentDiskTime AvgDiskBytesPerWrite AvgDiskBytesPerRead PercentDiskTime_Base AvgDisksecPerRead Timestamp_PerfTime AvgDiskBytesPerWrite_Base Name CurrentDiskQueueLength AvgDisksecPerWrite DiskReadBytesPersec Caption PercentDiskWriteTime Frequency_Object AvgDisksecPerRead_Base Frequency_PerfTime AvgDiskBytesPerRead_Base SplitIOPerSec AvgDiskReadQueueLength PercentDiskWriteTime_Base PercentDiskReadTime DiskReadsPersec AvgDiskWriteQueueLength AvgDisksecPerTransfer PercentIdleTime_Base DiskTransfersPersec AvgDisksecPerWrite_Base txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_PerfDisk_PhysicalDisk_all_000.xml000066400000000000000000000055161305406262000321260ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:6FE557C1-7C2E-42ED-B9EC-CEA7EAF570F6http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:DE72AAB6-FFC2-4A8A-97C3-F4896F51CD7F2430617696826276352128319701763153992800026989000168681250968249550000128380868750315129390000262763522430617696812831970176315062500000100000000 C:269890001301053117886347353992800013010531178863473512939000130105311788634735509944900013010531178863473500891203060804130105311788634735txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_PerfDisk_PhysicalDisk_all_001.xml000066400000000000000000000113311305406262000321170ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:5E7D613B-6310-43D8-A2F5-8C50A999BD24http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A00000000000000000000000062500000100000001 D:01301053117886347350130105311788634735013010531178863473542417500013010531178863473500891203060804130105311788634735243061769682627635212831970176315399280002698900016868125096824955000012838086875031512939000026276352243061769681283197017631506250000010000000_Total13494500130105311788634735199640001301053117886347356469500130105311788634735276181200013010531178863473500891203060804130105311788634735txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_PerfDisk_PhysicalDisk_star_000.xml000066400000000000000000000063061305406262000323250ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:040D0C44-1A89-460F-8DA0-10830666EDE9http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:4731D7B4-1439-4417-973C-5CBCD7E224FA2430617696826276352128319701763153992800026989000168681250968249550000128380868750315129390000262763522430617696812831970176315062500000100000000 C:269890001301053117872307263992800013010531178723072612939000130105311787230726509798000013010531178723072600891193882809130105311787230726txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_PerfDisk_PhysicalDisk_star_001.xml000066400000000000000000000127111305406262000323230ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:947C42A1-11F5-4F1C-B4A7-1AEA4B2355A9http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A00000000000000000000000062500000100000001 D:01301053117872307260130105311787230726013010531178723072642270600013010531178723072600891193882809130105311787230726243061769682627635212831970176315399280002698900016868125096824955000012838086875031512939000026276352243061769681283197017631506250000010000000_Total13494500130105311787230726199640001301053117872307266469500130105311787230726276034300013010531178723072600891193882809130105311787230726txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_PerfProc_Process.properties000066400000000000000000000011401305406262000313400ustar00rootroot00000000000000PageFaultsPersec PriorityBase Timestamp_Object PageFileBytes WorkingSetPrivate ThreadCount IDProcess IOOtherBytesPersec Description PercentProcessorTime IOWriteOperationsPersec CreatingProcessID PageFileBytesPeak Frequency_Sys100NS IOReadBytesPersec HandleCount Timestamp_Sys100NS PercentUserTime VirtualBytes WorkingSetPeak IODataBytesPersec Timestamp_PerfTime WorkingSet Name ElapsedTime Caption PercentPrivilegedTime PoolPagedBytes PrivateBytes Frequency_Object VirtualBytesPeak Frequency_PerfTime IOOtherOperationsPersec PoolNonpagedBytes IODataOperationsPersec IOReadOperationsPersec IOWriteBytesPersec txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_PerfProc_Process_all_000.xml000066400000000000000000000045221305406262000311620ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:115DA6B4-21DD-4E7F-9494-EF2FE0E15D40http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:AA33487A-41BB-4747-8B03-D088B3EDF89301301051692478840001000000062500000100000000000000000Idle10014222423968814222423968800000113010531179440677289123880859513010531179440677200245762457624576txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_PerfProc_Process_all_001.xml000066400000000000000000002146521305406262000311720ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:D719D4AE-F394-4AF2-B9EC-8CE931E42403http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A001301051692478840001000000062500000100000004704482354102022645152711401868928280485181940System10199110592270336383762463837624600081105927413010531179440677289123880859513010531179440677234611208638464307200548454457344413010516924819600010000000625000001000000032212333301772023273331012205smss53437273647513662400462400401624106481137273621301053117944067728912388085951301053117944067725169152193576961081344110182431129628413010516927331200010000000625000001000000041029213086316941604183413086316900csrss133818636801949696312002468003156001117681339761318636809130105311794406772891238808595130105311794406772500203526089932841574404235264132710433613010516927783600010000000625000001000000070344521356319508510521356300csrss#110831560576168345646800378000531200281209492813156057671301053117944067728912388085951301053117944067724406886444462080377241637969921093632284130105169277836000100000006250000010000000783527168120305027168100wininit116613271041642496624004780005156001961697776131327104313010531179440677289123880859513010531179440677249373184541245444308992435814499123233613010516927846000010000000625000001000000076380716817125597168100winlogon11141236992139264031200246800315600163124697613123699231301053117944067728912388085951301053117944067722652160057626624408780841082889379843521301051692828280001000000062500000100000002004402649529530556079612644126954026services2927378470447595528112052120120773900025131686020893784704813010531179440677289123880859513010531179440677234037760413941767557120832307231621123521301051692851680001000000062500000100000007344486028461834585046269755553847547293987lsass432663037446320128530403410608068530403424208107352963037449130105311794406772891238808595130105311794406772480215044854579213447168134471685648384352130105169285324000100000006250000010000000227460005461250000lsm1877288358434816000312002312002106646654482883584101301053117944067728912388085951301053117944067723103539233656832586547260252161843200440130105169293280000100000006250000010000000351548001172610870000svchost33533694592391987226520174212027156001014088887288369459211130105311794406772891238808595130105311794406772474193925039718485852168630272276480044013010516929764800010000000625000001000000025062400113922920000svchost#129163158016316211246800324960162028013152728725683158016813010531179440677289123880859513010531179440677236368384392437766934528694272026787843801301051692984280001000000062500000100000001466963363765638717621601LogonUI7889849920015880192312002936006624004233681582241384992005130105311794406772891238808595130105311794406772890593289071411215470592217907206742016440130105169298740000100000006250000010000000309704946752073819196292168926721942574848544svchost#2640910158080115630086708043185641191185607615816867208101580801313010531179440677289123880859513010531179440677249971200630865921227571213058048639385644013010516930045600010000000625000001000000097075615464371250718241064861160313015243861241983svchost#343263188416002335539274880481981212712324079376082176728188416003213010531179440677289123880859513010531179440677213043712015053619232382976338780161573273644013010516930279600010000000625000001000000029080830238011401830452155748686svchost#43202562790456279042340015280801846800323448944648562790412130105311794406772891238808595130105311794406772480993285028249610747904107479044300800440130105169304200000100000006250000010000000229856167283590554136853043svchost#52954353894437642246240049360063120021636013870483538944813010531179440677289123880859513010531179440677271286784755302401010483210317824280576044013010516930529200010000000625000001000000065690084846950145638902323179857440049895101svchost#6146601960755224334336468003010920070624004044287185456819607552231301053117944067728912388085951301053117944067721186897921239736322528460825763840136151044401301051693116880001000000062500000100000003071000163841398162370900163841svchost#74245900710490644481248008171601146800332848909608900710418130105311794406772891238808595130105311794406772544604165459148811321344114032644808704440130105169315588000100000006250000010000000268260159366728511127343202spoolsv34476119424639795203120023120021876814888086119424141301053117944067728912388085951301053117944067728168243283017728109076481098137642188804401301051693176160001000000062500000100000004882800186430000svchost#8690856064921600015600115600142962730488560644130105311794406772891238808595130105311794406772138403841445888026705922674688659456440130105169320112000100000006250000010000000861056005081120000rhelsvc15391757184182681646800362400415600188887428881757184513010531179440677289123880859513010531179440677239256064403046405500928555008014090244401301051693222960001000000062500000100000004661104224812162824813243197194722761890Ec2Config178155016371251728384156001062400404680030451643748808501637121813010531179440677289123880859513010531179440677261973708862436966442307584425820161526988854813010516933196800010000000625000001000000068127200484940000unsecapp176313230081376256000702455040813230084130105311794406772891238808595130105311794406772305807363162931245301764558848113868854813010516933368400010000000625000001000000048813403284924545935834214043238610424631412WmiPrvSE69133232939522918400016536106829925326645642633040161704823293952161301053117944067728912388085951301053117944067721322065926087680003346841646452736204554244401301051693472560001000000062500000100000002491484131141395085088411434119168020svchost#9242428672003137536124800817160114680031384882400828672001013010531179440677289123880859513010531179440677240583168426803208007680823296022241285481301051693583320001000000062500000100000005071632523556539559043865794849561427527942264WmiPrvSE#1376201504460816576512889205737440240285481832636816279281504460814130105311794406772891238808595130105311794406772938598401014456322444902425899008127713284401301051705578582071000000062500000100000007119842301601582001566230160100svchost#101327137216017039361560014680033120026912585368137216061301053117944067728912388085951301053117944067723096985631690752441548848619521073152440130105170560510717100000006250000010000000146194016384142817300163841msdtc2082329318433751040001784069448832931841313010531179440677289123880859513010531179440677263262720637870087434240754892827074561976130105231575874909100000006250000010000000125157625980482212102161725980482200csrss#2152016834561740800468003124800878000592561054321316834567130105311794406772891238808595130105311794406772476692484806246449766405013504119603219761301052315758749091000000062500000100000009618847168117027787168100winlogon#1146814704641630208624004780005156001751254888131470464313010531179440677289123880859513010531179440677232739328581509124825088486195211550724401301052315861716351000000062500000100000001172184440448021225221882taskhost19232437120254771200010240110728824371205130105311794406772891238808595130105311794406772552509446136217654108165574656132710414841301052315875757341000000062500000100000008822801882745089310982278452rdpclip1494145817616424960007216119504814581764130105311794406772891238808595130105311794406772615055366465126450462725128192124108885613010523158866781110000000625000001000000068233600162490000dwm328814540801626112156001156001073841073208145408031301053117944067728912388085951301053117944067725600460860715008455475249152001122304232813010523159053994310000000625000001000000047523682118165484111576520821175254806404explorer116671427865615585280452402976440493120020324882995928142786561413010531179440677289123880859513010531179440677216530227218678988828635136291880961005158423681301052317722927581000000062500000100000002226040017301380000cmd672199475230310403120023120020456078312819947521130105311794406772891238808595130105311794406772395632644061184025886722588672704512157613010523177276079110000000625000001000000069261236641743012421801614841conhost178516711681728512624004780005156001780015488081671168213010531179440677289123880859513010531179440677279155200793968646922240692224014049285481301052988789279811000000062500000100000006530040010281120000winrshost114912984321482752156001156001066645884881298432313010531179440677289123880859513010531179440677229933568309821444014080408371292979229213010529887892798110000000625000001000000032270431121148180031121conhost#16758683528683521560011560010504855024886835221301053117944067728912388085951301053117944067722701312027078656271155227197447004164401301053113750760841000000062500000100000001132064005081380000WmiApSrv15341748992174899215600131200215600191925912081748992713010531179440677289123880859513010531179440677231948800319610885636096563609615237125481301053113958242171000000062500000100000001963044150219642566045041502196400WmiPrvSE#2153305885952720486410920072496016140400911632688728588595281301053117944067728912388085951301053117944067724632166446387200961331211137024479232044013010531159956152310000000625000001000000010227000010261530000msiexec16171929216192921601560011560019736965208192921661301053117944067728912388085951301053117944067725152768051527680594329659432961671168013010531179440677210000000625000001000000097700833266211034918221960758060681000845303152265375046_Total2954182458460162816409601423420204431424952134251531929826194514350904024584601642513010531179440677289123880859513010531179440677228074147843496890368412286976446492672164986880txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_PerfProc_Process_star_000.xml000066400000000000000000000052521305406262000313640ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:9C01A73E-CAC0-4ABD-926E-478300E0C4F3http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:6D1F923E-81AF-4041-8957-49A79364104001301051692478840001000000062500000100000000000000000Idle10014222018366214222018366200000113010531179019474589121219682913010531179019474500245762457624576txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_PerfProc_Process_star_001.xml000066400000000000000000002251311305406262000313650ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:C6A2967A-28EB-4C20-9827-EC8E9E0FAAFDhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:64368224-8269-4FD5-A8AD-DF482A58279A01301051692478840001000000062500000100000004704482354102022645152711401868928280485181940System10199110592270336383762463837624600081105927413010531179019474589121219682913010531179019474534611208638464307200548454457344413010516924819600010000000625000001000000032212333301772023273331012205smss53437273647513662400462400401624106481137273621301053117901947458912121968291301053117901947455169152193576961081344110182431129628413010516927331200010000000625000001000000041029213086316941604183413086316900csrss133818636801949696312002468003156001117681339761318636809130105311790194745891212196829130105311790194745500203526089932841574404235264132710433613010516927783600010000000625000001000000070344521356319508510521356300csrss#110831560576168345646800378000531200281209492813156057671301053117901947458912121968291301053117901947454406886444462080377241637969921093632284130105169277836000100000006250000010000000783527168120305027168100wininit116613271041642496624004780005156001961697776131327104313010531179019474589121219682913010531179019474549373184541245444308992435814499123233613010516927846000010000000625000001000000076380716817125597168100winlogon11141236992139264031200246800315600163124697613123699231301053117901947458912121968291301053117901947452652160057626624408780841082889379843521301051692828280001000000062500000100000002004402649529530556079612644126954026services2927378470447595528112052120120773900025131686020893784704813010531179019474589121219682913010531179019474534037760413941767557120832307231621123521301051692851680001000000062500000100000007344486028461834585046269755553847547293987lsass432663037446320128530403410608068530403424208107352963037449130105311790194745891212196829130105311790194745480215044854579213447168134471685648384352130105169285324000100000006250000010000000227460005461250000lsm1877288358434816000312002312002106646654482883584101301053117901947458912121968291301053117901947453103539233656832586547260252161843200440130105169293280000100000006250000010000000351548001172610870000svchost33533694592391987226520174212027156001014088887288369459211130105311790194745891212196829130105311790194745474193925039718485852168630272276480044013010516929764800010000000625000001000000025062400113922920000svchost#129163158016316211246800324960162028013152728725683158016813010531179019474589121219682913010531179019474536368384392437766934528694272026787843801301051692984280001000000062500000100000001466963363765638717621601LogonUI7889849920015880192312002936006624004233681582241384992005130105311790194745891212196829130105311790194745890593289071411215470592217907206742016440130105169298740000100000006250000010000000309704946752073819196292168926721942574848544svchost#2640910158080115630086708043185641191185607615816867208101580801313010531179019474589121219682913010531179019474549971200630865921227571213058048639385644013010516930045600010000000625000001000000097075615464371250718241064861160313015243861241983svchost#343112187351042335539274880481981212712324079376082176728187351043213010531179019474589121219682913010531179019474513043712015053619232288768338780161563852844013010516930279600010000000625000001000000029080830238011401830452155748686svchost#43202562790456279042340015280801846800323448944648562790412130105311790194745891212196829130105311790194745480993285028249610747904107479044300800440130105169304200000100000006250000010000000229856167283590554136853043svchost#52954353894437642246240049360063120021636013870483538944813010531179019474589121219682913010531179019474571286784755302401010483210317824280576044013010516930529200010000000625000001000000065690084846950144696222322479857440049895101svchost#6145602018099224334336468003010920070624004044237185456820180992231301053117901947458912121968291301053117901947451186897921239736322533376025763840136642564401301051693116880001000000062500000100000003071000163841398162370900163841svchost#74245900710490644481248008171601146800332848909608900710418130105311790194745891212196829130105311790194745544604165459148811321344114032644808704440130105169315588000100000006250000010000000268260159366728511127343202spoolsv34476119424639795203120023120021876814888086119424141301053117901947458912121968291301053117901947458168243283017728109076481098137642188804401301051693176160001000000062500000100000004882800186430000svchost#8690856064921600015600115600142962730488560644130105311790194745891212196829130105311790194745138403841445888026705922674688659456440130105169320112000100000006250000010000000861056005081120000rhelsvc15391757184182681646800362400415600188887428881757184513010531179019474589121219682913010531179019474539256064403046405500928555008014090244401301051693222960001000000062500000100000004661104224812162824813243197194722761890Ec2Config178155016371251728384156001062400404680030451643748808501637121813010531179019474589121219682913010531179019474561973708862436966442307584425820161526988854813010516933196800010000000625000001000000068127200484940000unsecapp176313230081376256000702455040813230084130105311790194745891212196829130105311790194745305807363162931245301764558848113868854813010516933368400010000000625000001000000048813403284924545935834214043238610424631412WmiPrvSE69073232939522918400016536106829925326645642633040161704823293952161301053117901947458912121968291301053117901947451322065926087680003346841646452736204554244401301051693472560001000000062500000100000002491484131141395085088411434119168020svchost#9242428672003137536124800817160114680031384882400828672001013010531179019474589121219682913010531179019474540583168426803208007680823296022241285481301051693583320001000000062500000100000005071632523556539559043865794849561427527942264WmiPrvSE#1376201504460816576512889205737440240285481832636816279281504460814130105311790194745891212196829130105311790194745938598401014456322444902425899008127713284401301051705578582071000000062500000100000007119842301601582001566230160100svchost#101327137216017039361560014680033120026912585368137216061301053117901947458912121968291301053117901947453096985631690752441548848619521073152440130105170560510717100000006250000010000000146194016384142817300163841msdtc2082329318433751040001784069448832931841313010531179019474589121219682913010531179019474563262720637870087434240754892827074561976130105231575874909100000006250000010000000125157625980482212102161725980482200csrss#2152016834561740800468003124800878000592561054321316834567130105311790194745891212196829130105311790194745476692484806246449766405013504119603219761301052315758749091000000062500000100000009618847168117027787168100winlogon#1146814704641630208624004780005156001751254888131470464313010531179019474589121219682913010531179019474532739328581509124825088486195211550724401301052315861716351000000062500000100000001172184440448021225221882taskhost19232437120254771200010240110728824371205130105311790194745891212196829130105311790194745552509446136217654108165574656132710414841301052315875757341000000062500000100000008822801882745089310982278452rdpclip1494145817616424960007216119504814581764130105311790194745891212196829130105311790194745615055366465126450462725128192124108885613010523158866781110000000625000001000000068233600162490000dwm328814540801626112156001156001073841073208145408031301053117901947458912121968291301053117901947455600460860715008455475249152001122304232813010523159053994310000000625000001000000047523682118165484111576520821175254806404explorer116671427865615585280452402976440493120020324882995928142786561413010531179019474589121219682913010531179019474516530227218678988828635136291880961005158423681301052317722927581000000062500000100000002226040017301380000cmd672199475230310403120023120020456078312819947521130105311790194745891212196829130105311790194745395632644061184025886722588672704512157613010523177276079110000000625000001000000069261236641743012421801614841conhost178516711681728512624004780005156001780015488081671168213010531179019474589121219682913010531179019474579155200793968646922240692224014049285481301052988789279811000000062500000100000006530040010281120000winrshost1149129843214827521560011560010666458848812984323130105311790194745891212196829130105311790194745299335683098214440140804083712929792txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_PerfProc_Process_star_002.xml000066400000000000000000000252441305406262000313710ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:799B60CE-1EF6-4E6E-ADA7-7DEADBF8C463http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A029213010529887892798110000000625000001000000032270431121148180031121conhost#16758683528683521560011560010504855024886835221301053117901947458912121968291301053117901947452701312027078656271155227197447004164401301053113750760841000000062500000100000001132064005081380000WmiApSrv15341748992174899215600131200215600191925912081748992713010531179019474589121219682913010531179019474531948800319610885636096563609615237125481301053113958242171000000062500000100000001963044150219642566045041502196400WmiPrvSE#2147735783552715571210920072340015124800811632688728578355281301053117901947458912121968291301053117901947454632166446387200912588811071488430489644013010531159956152310000000625000001000000010227000010261530000msiexec16171929216192921601560011560019736965208192921661301053117901947458912121968291301053117901947455152768051527680594329659432961671168013010531179019474510000000625000001000000097700833266211034918127692758053681000845303152265375046_Total2945502462105602815918081423379644171424910013981530369816194014350904024621056042513010531179019474589121219682913010531179019474528074147843496890368411754496446427136164454400txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_Tcpip_NetworkInterface.properties000066400000000000000000000010211305406262000325310ustar00rootroot00000000000000OutputQueueLength Frequency_Sys100NS BytesTotalPersec PacketsReceivedDiscarded PacketsSentUnicastPersec Timestamp_Object PacketsReceivedNonUnicastPersec PacketsPersec Timestamp_Sys100NS PacketsReceivedPersec PacketsOutboundDiscarded Timestamp_PerfTime PacketsReceivedUnknown Name PacketsSentPersec Caption PacketsReceivedUnicastPersec BytesReceivedPersec Frequency_Object Frequency_PerfTime Description PacketsOutboundErrors PacketsReceivedErrors OffloadedConnections BytesSentPersec CurrentBandwidth PacketsSentNonUnicastPersec txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_Tcpip_NetworkInterface_all_000.xml000066400000000000000000000041771305406262000323630ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:D71C7006-2F48-4727-A83C-E26471115891http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:43CEAD62-8D86-4550-85D8-CEC29CA15CF39159713591352450732310000000006250000010000000RedHat PV NIC Driver _2000010348003448844850282586055780890989403319130105311754470000txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_Tcpip_NetworkInterface_all_001.xml000066400000000000000000000065541305406262000323650ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:E5D2CA1F-7147-49DA-9AA2-A2801D761F01http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A000010000006250000010000000isatap.solutions.loc00000000000000089098940331913010531175447000000010000006250000010000000Local Area Connection* 11000000000000000890989403319130105311754470000txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_Tcpip_NetworkInterface_star_000.xml000066400000000000000000000047071305406262000325630ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:E0494360-F0DA-47FF-8E4A-07FCBD03492Dhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:B078BCF2-C9E6-4214-A3F6-CAD5A5D6D9C99124473583981449642810000000006250000010000000RedHat PV NIC Driver _2000010335003448244790282585355710890980751521130105311753060000txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_PerfRawData_Tcpip_NetworkInterface_star_001.xml000066400000000000000000000077741305406262000325730ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:7EA5F63D-A0C9-4FBA-A9E3-CD1DF593C35Chttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A000010000006250000010000000isatap.solutions.loc00000000000000089098075152113010531175306000000010000006250000010000000Local Area Connection* 11000000000000000890980751521130105311753060000txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Process.properties000066400000000000000000000012511305406262000253230ustar00rootroot00000000000000MaximumWorkingSetSize MinimumWorkingSetSize ThreadCount KernelModeTime Priority OtherTransferCount VirtualSize CSCreationClassName PrivatePageCount Status ProcessId PeakVirtualSize Handle Description OSCreationClassName HandleCount PeakPageFileUsage QuotaPeakNonPagedPoolUsage CSName WindowsVersion WorkingSetSize WriteOperationCount PageFaults Name InstallDate ParentProcessId QuotaPeakPagedPoolUsage OtherOperationCount CommandLine PeakWorkingSetSize Caption QuotaNonPagedPoolUsage PageFileUsage ReadOperationCount TerminationDate QuotaPagedPoolUsage WriteTransferCount ExecutionState SessionId OSName CreationDate UserModeTime CreationClassName ExecutablePath ReadTransferCount txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Process_all_000.xml000066400000000000000000000051261305406262000251430ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:8FE318E6-7726-4518-969D-3ACC923AF26Ahttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:340BD7A7-D664-44CF-B61B-82F17989407DSystem Idle ProcessWin32_ProcessWin32_ComputerSystemAMAZONA-Q2R281FSystem Idle Process00142214099623System Idle ProcessWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition100100002400000000001006.1.76012457600txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Process_all_001.xml000066400000000000000000002235571305406262000251560ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:716A0793-E93F-4505-87A4-7F394E596C90http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:2DFC0532-9AB3-4E22-A680-AC11C09A70EFSystemWin32_Process2013-04-15T16:28:44.7884ZWin32_ComputerSystemAMAZONA-Q2R281FSystem447038376246SystemWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1271164515101991080264863846453568110592400008240186892074034611206.1.760130720019408048518smss.exe\SystemRoot\System32\smss.exeWin32_Process2013-04-15T16:28:44.8196ZWin32_ComputerSystemAMAZONA-Q2R281Fsmss.exe212326240041380200smss.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition13277202534364446419357696107611372736212211738123331002051691526.1.76011081344520csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:28:47.3312ZWin32_ComputerSystemAMAZONA-Q2R281Fcsrss.exeC:\Windows\system32\csrss.exe2924103120021380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1183441604133818202841904608993284136131863680292121312116916913086309156001500203526.1.7601415744000csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:28:47.7836ZWin32_ComputerSystemAMAZONA-Q2R281Fcsrss.exeC:\Windows\system32\csrss.exe344704680031380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition151019508108315243361644444620803708131560576344893993635213517312002440688646.1.7601377241600wininit.exewininit.exeWin32_Process2013-04-15T16:28:47.7836ZWin32_ComputerSystemAMAZONA-Q2R281Fwininit.exeC:\Windows\system32\wininit.exe352786240041380200wininit.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition150220301166129628416045412454442561313271043521096121021716803156001493731846.1.7601430899200winlogon.exewinlogon.exeWin32_Process2013-04-15T16:28:47.846ZWin32_ComputerSystemAMAZONA-Q2R281Fwinlogon.exeC:\Windows\system32\winlogon.exe380763120021380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition155971211141208336136057626624401213123699238074681051716813156001265216006.1.7601408780800services.exeC:\Windows\system32\services.exeWin32_Process2013-04-15T16:28:48.2828ZWin32_ComputerSystemAMAZONA-Q2R281Fservices.exeC:\Windows\system32\services.exe44020081120521380200services.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition17961305560292736963524648413941768128937847044401359176869264412083900025340377606.1.7601755712026540lsass.exeC:\Windows\system32\lsass.exeWin32_Process2013-04-15T16:28:48.5168ZWin32_ComputerSystemAMAZONA-Q2R281Flsass.exeC:\Windows\system32\lsass.exe44873453040341380200lsass.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition12697585046432661563526172485457921313296303744448241052510684755553095304034480215046.1.760113447168987547293lsm.exeC:\Windows\system32\lsm.exeWin32_Process2013-04-15T16:28:48.5324ZWin32_ComputerSystemAMAZONA-Q2R281Flsm.exeC:\Windows\system32\lsm.exe46022701380200lsm.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1125546187728163523400336568325884828835844601165126600010312002310353926.1.7601586547200svchost.exeC:\Windows\system32\svchost.exe -k DcomLaunchWin32_Process2013-04-15T16:28:49.328ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe54835126520171380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition11087117263353360844038285039718484288369459254814871790000111560010474193926.1.7601858521600svchost.exeC:\Windows\system32\svchost.exe -k RPCSSWin32_Process2013-04-15T16:28:49.7648ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe6242504680031380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition129211392291630844403088392437766780831580166241586169000082028013363683846.1.7601693452800LogonUI.exe"LogonUI.exe" /flags:0x0Win32_Process2013-04-15T16:28:49.8428ZWin32_ComputerSystemAMAZONA-Q2R281FLogonUI.exeC:\Windows\system32\LogonUI.exe6961463120021380200LogonUI.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition13877656788983003801550890714112212801384992006962315525156217615624004890593286.1.7601154705921160svchost.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedWin32_Process2013-04-15T16:28:49.874ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\System32\svchost.exe70430967080431380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition129211919664099920440112926308659212752810158080704168522107194689267201311856076499712006.1.7601122757125442574848svchost.exeC:\Windows\system32\svchost.exe -k netsvcsWin32_Process2013-04-15T16:28:50.0456ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe75697074880481380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition16486182410427101866844022808150536192330848191160327563721389222152411603130032120120771304371206.1.7601325632009833861241svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceWin32_Process2013-04-15T16:28:50.2796ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe80829023400151380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1304511401832025496440549650282496104968562790480823932596742155012468003480993286.1.7601107479046868svchost.exeC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedWin32_Process2013-04-15T16:28:50.42ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\System32\svchost.exe8562296240041380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1554359029543456440367675530240100768353894485616136181395136808312002712867846.1.7601101048323304svchost.exeC:\Windows\system32\svchost.exe -k NetworkServiceWin32_Process2013-04-15T16:28:50.5292ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe90065643680281380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1232094354379144071919644023764123973632251608196567049004418211018640079857402362400401186897926.1.76012532556810149895svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkWin32_Process2013-04-15T16:28:51.1688ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe100030712480081380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1370939816242458796440885254591488111368900710410003389349200018468003544604166.1.760111321344116384spoolsv.exeC:\Windows\System32\spoolsv.exeWin32_Process2013-04-15T16:28:51.5588ZWin32_ComputerSystemAMAZONA-Q2R281Fspoolsv.exeC:\Windows\System32\spoolsv.exe26026801380200spoolsv.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition15116728344759764406248830177281072486119424260191462014841273014312002816824326.1.7601109076482320svchost.exeC:\Windows\system32\svchost.exe -k regsvcWin32_Process2013-04-15T16:28:51.7616ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe8284801380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition14318669083644090014458880261288560648285275270004156001138403846.1.7601267059200rhelsvc.exeC:\Windows\system32\rhelsvc.exeWin32_Process2013-04-15T16:28:52.0112ZWin32_ComputerSystemAMAZONA-Q2R281Frhelsvc.exeC:\Windows\system32\rhelsvc.exe1056864680031380200rhelsvc.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition111250815391716440178440304640542081757184105697310730005156001392560646.1.7601550092800Ec2Config.exe"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"Win32_Process2013-04-15T16:28:52.2296ZWin32_ComputerSystemAMAZONA-Q2R281FEc2Config.exeC:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe110446615600101380200Ec2Config.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition132438248117815489884405051662436966441584850163712110445367483737219719401846800306197370886.1.7601423075849027618unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -EmbeddingWin32_Process2013-04-15T16:28:53.1968ZWin32_ComputerSystemAMAZONA-Q2R281Funsecapp.exeC:\Windows\system32\wbem\unsecapp.exe12726801380200unsecapp.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition19448417631292548134431629312445281323008127275485500040305807366.1.7601453017600WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:28:53.3684ZWin32_ComputerSystemAMAZONA-Q2R281FWmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe1340488165361061380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition121404593583468883227485482850060876800045364823293952134033158361065423238610016663004251322065926.1.7601334684161246314svchost.exeC:\Windows\System32\svchost.exe -k termsvcsWin32_Process2013-04-15T16:28:54.7256ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\System32\svchost.exe148424912480081380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1884508502424280044030644268032080408286720014841481178111911434010468003405831686.1.76018007680201680WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:28:55.8332ZWin32_ComputerSystemAMAZONA-Q2R281FWmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe163250788920571380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition16576205590438375271469254816188101445632252928150446081632261593117327549561401428548183938598406.1.76012440396826427942svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonationWin32_Process2013-04-15T16:30:55.78582ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe1984711560011380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1156658200132713404401664316907524748813721601984758758123016006312002309698566.1.7601441548800msdtc.exeC:\Windows\System32\msdtc.exeWin32_Process2013-04-15T16:30:56.051071ZWin32_ComputerSystemAMAZONA-Q2R281Fmsdtc.exeC:\Windows\System32\msdtc.exe194014601380200msdtc.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition117342820823216440329663787008737283293184194018681869000130632627206.1.76017434240116384csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T18:12:37.58749ZWin32_ComputerSystemAMAZONA-Q2R281Fcsrss.exeC:\Windows\system32\csrss.exe15761254680031380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition116171210215201644197617004806246448961316834561576101031510582225980427780005476692486.1.7601497664000winlogon.exewinlogon.exeWin32_Process2013-04-15T18:12:37.58749ZWin32_ComputerSystemAMAZONA-Q2R281Fwinlogon.exeC:\Windows\system32\winlogon.exe1884966240041380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1778170214681436197615925815091247481314704641884854101051716823156001327393286.1.7601482508800taskhost.exe"taskhost.exe"Win32_Process2013-04-15T18:12:38.617163ZWin32_ComputerSystemAMAZONA-Q2R281Ftaskhost.exeC:\Windows\system32\taskhost.exe218411701380200taskhost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition121248019232380440248861362176544482437120218410109111142252250552509446.1.760154108162188rdpclip.exerdpclipWin32_Process2013-04-15T18:12:38.757573ZWin32_ComputerSystemAMAZONA-Q2R281Frdpclip.exeC:\Windows\System32\rdpclip.exe22808801380200rdpclip.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition193508149414241484160464651264500881458176228081179120221098240615055366.1.7601504627252784dwm.exe"C:\Windows\system32\Dwm.exe"Win32_Process2013-04-15T18:12:38.866781ZWin32_ComputerSystemAMAZONA-Q2R281Fdwm.exeC:\Windows\system32\Dwm.exe2336681560011380200dwm.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1491623288142085615886071500848008145408023368105911200230560046086.1.7601455475200explorer.exeC:\Windows\Explorer.EXEWin32_Process2013-04-15T18:12:39.053994ZWin32_ComputerSystemAMAZONA-Q2R281Fexplorer.exeC:\Windows\Explorer.EXE236847545240291380200explorer.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1520811157611667139442328152201867898882850481427865623683229335333480211752521431200201653022726.1.7601286351364640cmd.exe"C:\Windows\system32\cmd.exe" Win32_Process2013-04-15T18:12:57.229275ZWin32_ComputerSystemAMAZONA-Q2R281Fcmd.exeC:\Windows\system32\cmd.exe2604223120021380200cmd.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1138173067219482368296040611840252881994752260457757700210395632646.1.7601258867200conhost.exe\??\C:\Windows\system32\conhost.exe "-897240659-2120624301748574208734471965-1521459429-1717192135-428579660-1627570850Win32_Process2013-04-15T18:12:57.276079ZWin32_ComputerSystemAMAZONA-Q2R281Fconhost.exeC:\Windows\system32\conhost.exe2612696240041380200conhost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition112443017851632157616887939686467608167116826128152915316218022156001791552006.1.7601692224011484txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Process_all_002.xml000066400000000000000000000254521305406262000251510ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:106991FC-99F2-49A3-A6E8-1383AC6A4BA5http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0winrshost.exeC:\Windows\system32\WinrsHost.exe -EmbeddingWin32_Process2013-04-15T20:04:47.892798ZWin32_ComputerSystemAMAZONA-Q2R281Fwinrshost.exeC:\Windows\system32\WinrsHost.exe3004651560011380200winrshost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1112102811491268548144830982144398881298432300475885800030299335686.1.7601401408000conhost.exe\??\C:\Windows\system32\conhost.exe "1148426279-3161866141280036750670805631-20052149801639207718858984970-945783547Win32_Process2013-04-15T20:04:47.892798ZWin32_ComputerSystemAMAZONA-Q2R281Fconhost.exeC:\Windows\system32\conhost.exe2704321560011380200conhost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1181486758482928482707865626568868352270455465500020270131206.1.7601271155213112WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exeWin32_Process2013-04-15T20:25:37.507608ZWin32_ComputerSystemAMAZONA-Q2R281FWmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe20641131560011380200WmiApSrv.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition113850815341708440170831961088550481748992206495810580007156001319488006.1.7601563609600WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T20:25:39.582421ZWin32_ComputerSystemAMAZONA-Q2R281FWmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe304419510920071380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition145012134014530515254869884638720010812852756483044126814684150219608936006463216646.1.7601891699200msiexec.exeC:\Windows\system32\msiexec.exe /VWin32_Process2013-04-15T20:25:59.956152ZWin32_ComputerSystemAMAZONA-Q2R281Fmsiexec.exeC:\Windows\system32\msiexec.exe270010201380200msiexec.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition11531026161718844401884515276805804819292162700109510950006156001515276806.1.7601594329600txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Process_star_000.xml000066400000000000000000000055541305406262000253510ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:35802D6D-E156-4F61-A767-0E4D659D3A75http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:1723CCC9-F4AE-4C37-A7F6-E76EA69258CESystem Idle ProcessWin32_ProcessWin32_ComputerSystemAMAZONA-Q2R281FSystem Idle Process00142209731595System Idle ProcessWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition100100002400000000001006.1.76012457600txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Process_star_001.xml000066400000000000000000002260131305406262000253450ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:9F0E21D1-5CA9-4937-B6A4-8924B8E8CEDDhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:AC2E6BF8-8010-4839-BE6A-C7F597A3D05ASystemWin32_Process2013-04-15T16:28:44.7884ZWin32_ComputerSystemAMAZONA-Q2R281FSystem447038376246SystemWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1271164515101991080264863846453568110592400008240186892074034611206.1.760130720019408048518smss.exe\SystemRoot\System32\smss.exeWin32_Process2013-04-15T16:28:44.8196ZWin32_ComputerSystemAMAZONA-Q2R281Fsmss.exe212326240041380200smss.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition13277202534364446419357696107611372736212211738123331002051691526.1.76011081344520csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:28:47.3312ZWin32_ComputerSystemAMAZONA-Q2R281Fcsrss.exeC:\Windows\system32\csrss.exe2924103120021380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1183441604133818202841904608993284136131863680292121312116916913086309156001500203526.1.7601415744000csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:28:47.7836ZWin32_ComputerSystemAMAZONA-Q2R281Fcsrss.exeC:\Windows\system32\csrss.exe344704680031380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition151019508108315243361644444620803708131560576344893993635213517312002440688646.1.7601377241600wininit.exewininit.exeWin32_Process2013-04-15T16:28:47.7836ZWin32_ComputerSystemAMAZONA-Q2R281Fwininit.exeC:\Windows\system32\wininit.exe352786240041380200wininit.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition150220301166129628416045412454442561313271043521096121021716803156001493731846.1.7601430899200winlogon.exewinlogon.exeWin32_Process2013-04-15T16:28:47.846ZWin32_ComputerSystemAMAZONA-Q2R281Fwinlogon.exeC:\Windows\system32\winlogon.exe380763120021380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition155971211141208336136057626624401213123699238074681051716813156001265216006.1.7601408780800services.exeC:\Windows\system32\services.exeWin32_Process2013-04-15T16:28:48.2828ZWin32_ComputerSystemAMAZONA-Q2R281Fservices.exeC:\Windows\system32\services.exe44020081120521380200services.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition17961305560292736963524648413941768128937847044401359176869264412083900025340377606.1.7601755712026540lsass.exeC:\Windows\system32\lsass.exeWin32_Process2013-04-15T16:28:48.5168ZWin32_ComputerSystemAMAZONA-Q2R281Flsass.exeC:\Windows\system32\lsass.exe44873453040341380200lsass.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition12697585046432661563526172485457921313296303744448241052510684755553095304034480215046.1.760113447168987547293lsm.exeC:\Windows\system32\lsm.exeWin32_Process2013-04-15T16:28:48.5324ZWin32_ComputerSystemAMAZONA-Q2R281Flsm.exeC:\Windows\system32\lsm.exe46022701380200lsm.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1125546187728163523400336568325884828835844601165126600010312002310353926.1.7601586547200svchost.exeC:\Windows\system32\svchost.exe -k DcomLaunchWin32_Process2013-04-15T16:28:49.328ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe54835126520171380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition11087117263353360844038285039718484288369459254814871790000111560010474193926.1.7601858521600svchost.exeC:\Windows\system32\svchost.exe -k RPCSSWin32_Process2013-04-15T16:28:49.7648ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe6242504680031380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition129211392291630844403088392437766780831580166241586169000082028013363683846.1.7601693452800LogonUI.exe"LogonUI.exe" /flags:0x0Win32_Process2013-04-15T16:28:49.8428ZWin32_ComputerSystemAMAZONA-Q2R281FLogonUI.exeC:\Windows\system32\LogonUI.exe6961463120021380200LogonUI.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition13877656788983003801550890714112212801384992006962315525156217615624004890593286.1.7601154705921160svchost.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedWin32_Process2013-04-15T16:28:49.874ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\System32\svchost.exe70430967080431380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition129211919664099920440112926308659212752810158080704168522107194689267201311856076499712006.1.7601122757125442574848svchost.exeC:\Windows\system32\svchost.exe -k netsvcsWin32_Process2013-04-15T16:28:50.0456ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe75697074880481380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition16486182410426841866844022808150536192330848191160327563721389222152411603130032120120771304371206.1.7601325632009833861241svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceWin32_Process2013-04-15T16:28:50.2796ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe80829023400151380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1304511401832025496440549650282496104968562790480823932596742155012468003480993286.1.7601107479046868svchost.exeC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedWin32_Process2013-04-15T16:28:50.42ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\System32\svchost.exe8562296240041380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1554359029543456440367675530240100768353894485616136181395136808312002712867846.1.7601101048323304svchost.exeC:\Windows\system32\svchost.exe -k NetworkServiceWin32_Process2013-04-15T16:28:50.5292ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe90065642120271380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1232024248351143541972444023764123973632251608201973769004418211018640079857402362400401186897926.1.76012538291210149895svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkWin32_Process2013-04-15T16:28:51.1688ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe100030712480081380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1370939816242458796440885254591488111368900710410003389349200018468003544604166.1.760111321344116384spoolsv.exeC:\Windows\System32\spoolsv.exeWin32_Process2013-04-15T16:28:51.5588ZWin32_ComputerSystemAMAZONA-Q2R281Fspoolsv.exeC:\Windows\System32\spoolsv.exe26026801380200spoolsv.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition15116728344759764406248830177281072486119424260191462014841273014312002816824326.1.7601109076482320svchost.exeC:\Windows\system32\svchost.exe -k regsvcWin32_Process2013-04-15T16:28:51.7616ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe8284801380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition14318669083644090014458880261288560648285275270004156001138403846.1.7601267059200rhelsvc.exeC:\Windows\system32\rhelsvc.exeWin32_Process2013-04-15T16:28:52.0112ZWin32_ComputerSystemAMAZONA-Q2R281Frhelsvc.exeC:\Windows\system32\rhelsvc.exe1056864680031380200rhelsvc.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition111250815391716440178440304640542081757184105697310730005156001392560646.1.7601550092800Ec2Config.exe"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"Win32_Process2013-04-15T16:28:52.2296ZWin32_ComputerSystemAMAZONA-Q2R281FEc2Config.exeC:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe110446615600101380200Ec2Config.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition132438248117815489884405051662436966441584850163712110445367483737219719401846800306197370886.1.7601423075849027618unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -EmbeddingWin32_Process2013-04-15T16:28:53.1968ZWin32_ComputerSystemAMAZONA-Q2R281Funsecapp.exeC:\Windows\system32\wbem\unsecapp.exe12726801380200unsecapp.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition19448417631292548134431629312445281323008127275485500040305807366.1.7601453017600WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:28:53.3684ZWin32_ComputerSystemAMAZONA-Q2R281FWmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe1340488165361061380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition121404593583468883227485482850060876800045364823293952134033158361065423238610016663004251322065926.1.7601334684161246314svchost.exeC:\Windows\System32\svchost.exe -k termsvcsWin32_Process2013-04-15T16:28:54.7256ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\System32\svchost.exe148424912480081380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1884508502424280044030644268032080408286720014841481178111911434010468003405831686.1.76018007680201680WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:28:55.8332ZWin32_ComputerSystemAMAZONA-Q2R281FWmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe163250788920571380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition16572925590438374161465654816188101445632252928150077441632261593117327549561401428392182938598406.1.76012428518426427942svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonationWin32_Process2013-04-15T16:30:55.78582ZWin32_ComputerSystemAMAZONA-Q2R281Fsvchost.exeC:\Windows\system32\svchost.exe1984711560011380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1156658200132713404401664316907524748813721601984758758123016006312002309698566.1.7601441548800msdtc.exeC:\Windows\System32\msdtc.exeWin32_Process2013-04-15T16:30:56.051071ZWin32_ComputerSystemAMAZONA-Q2R281Fmsdtc.exeC:\Windows\System32\msdtc.exe194014601380200msdtc.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition117342820823216440329663787008737283293184194018681869000130632627206.1.76017434240116384csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T18:12:37.58749ZWin32_ComputerSystemAMAZONA-Q2R281Fcsrss.exeC:\Windows\system32\csrss.exe15761254680031380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition116171210215201644197617004806246448961316834561576101031510582225980427780005476692486.1.7601497664000winlogon.exewinlogon.exeWin32_Process2013-04-15T18:12:37.58749ZWin32_ComputerSystemAMAZONA-Q2R281Fwinlogon.exeC:\Windows\system32\winlogon.exe1884966240041380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1778170214681436197615925815091247481314704641884854101051716823156001327393286.1.7601482508800taskhost.exe"taskhost.exe"Win32_Process2013-04-15T18:12:38.617163ZWin32_ComputerSystemAMAZONA-Q2R281Ftaskhost.exeC:\Windows\system32\taskhost.exe218411701380200taskhost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition121248019232380440248861362176544482437120218410109111142252250552509446.1.760154108162188rdpclip.exerdpclipWin32_Process2013-04-15T18:12:38.757573ZWin32_ComputerSystemAMAZONA-Q2R281Frdpclip.exeC:\Windows\System32\rdpclip.exe22808801380200rdpclip.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition193508149414241484160464651264500881458176228081179120221098240615055366.1.7601504627252784txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Process_star_002.xml000066400000000000000000000527541305406262000253570ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:B3E198BF-F0F6-408A-B514-3EEB72441760http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0dwm.exe"C:\Windows\system32\Dwm.exe"Win32_Process2013-04-15T18:12:38.866781ZWin32_ComputerSystemAMAZONA-Q2R281Fdwm.exeC:\Windows\system32\Dwm.exe2336681560011380200dwm.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1491623288142085615886071500848008145408023368105911200230560046086.1.7601455475200explorer.exeC:\Windows\Explorer.EXEWin32_Process2013-04-15T18:12:39.053994ZWin32_ComputerSystemAMAZONA-Q2R281Fexplorer.exeC:\Windows\Explorer.EXE236847545240291380200explorer.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1520811157611667139442328152201867898882850481427865623683229335333480211752521431200201653022726.1.7601286351364640cmd.exe"C:\Windows\system32\cmd.exe" Win32_Process2013-04-15T18:12:57.229275ZWin32_ComputerSystemAMAZONA-Q2R281Fcmd.exeC:\Windows\system32\cmd.exe2604223120021380200cmd.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1138173067219482368296040611840252881994752260457757700210395632646.1.7601258867200conhost.exe\??\C:\Windows\system32\conhost.exe "-897240659-2120624301748574208734471965-1521459429-1717192135-428579660-1627570850Win32_Process2013-04-15T18:12:57.276079ZWin32_ComputerSystemAMAZONA-Q2R281Fconhost.exeC:\Windows\system32\conhost.exe2612696240041380200conhost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition112443017851632157616887939686467608167116826128152915316218022156001791552006.1.7601692224011484winrshost.exeC:\Windows\system32\WinrsHost.exe -EmbeddingWin32_Process2013-04-15T20:04:47.892798ZWin32_ComputerSystemAMAZONA-Q2R281Fwinrshost.exeC:\Windows\system32\WinrsHost.exe3004651560011380200winrshost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1112102811491268548144830982144398881298432300475885800030299335686.1.7601401408000conhost.exe\??\C:\Windows\system32\conhost.exe "1148426279-3161866141280036750670805631-20052149801639207718858984970-945783547Win32_Process2013-04-15T20:04:47.892798ZWin32_ComputerSystemAMAZONA-Q2R281Fconhost.exeC:\Windows\system32\conhost.exe2704321560011380200conhost.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition1181486758482928482707865626568868352270455465500020270131206.1.7601271155213112WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exeWin32_Process2013-04-15T20:25:37.507608ZWin32_ComputerSystemAMAZONA-Q2R281FWmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe20641131560011380200WmiApSrv.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition113850815341708440170831961088550481748992206495810580007156001319488006.1.7601563609600WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T20:25:39.582421ZWin32_ComputerSystemAMAZONA-Q2R281FWmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe304419510920071380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition145012134014530515254869884638720010812852756483044126814684150219608936006463216646.1.7601891699200msiexec.exeC:\Windows\system32\msiexec.exe /VWin32_Process2013-04-15T20:25:59.956152ZWin32_ComputerSystemAMAZONA-Q2R281Fmsiexec.exeC:\Windows\system32\msiexec.exe270010201380200msiexec.exeWin32_OperatingSystemMicrosoft Windows Server 2008 R2 Datacenter |C:\Windows|\Device\Harddisk0\Partition11531026161718844401884515276805804819292162700109510950006156001515276806.1.7601594329600txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Processor.properties000066400000000000000000000011601305406262000256630ustar00rootroot00000000000000L2CacheSize ConfigManagerErrorCode VoltageCaps PowerManagementSupported LoadPercentage Version MaxClockSpeed CpuStatus Revision Status PNPDeviceID L2CacheSpeed AddressWidth ConfigManagerUserConfig ErrorCleared ProcessorId ProcessorType DeviceID CurrentVoltage CurrentClockSpeed Manufacturer Name InstallDate Level SocketDesignation NumberOfCores Caption StatusInfo Architecture UniqueId CreationClassName OtherFamilyDescription Description NumberOfLogicalProcessors Family ErrorDescription UpgradeMethod SystemName LastErrorCode ExtClock Stepping Role L3CacheSize L3CacheSpeed Availability SystemCreationClassName DataWidth txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Processor_all_000.xml000066400000000000000000000047041305406262000255050ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:A7FC90F5-580B-431E-8E63-996D3ABF2A40http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039596493Intel64 Family 6 Model 44 Stepping 21Win32_Processor212464Intel64 Family 6 Model 44 Stepping 2CPU010060GenuineIntel2124Intel(R) Xeon(R) CPU E5645 @ 2.40GHz11false1789FBFF000206C2311266CPUCPU 1OK3Win32_ComputerSystemAMAZONA-Q2R281F10txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Processor_star_000.xml000066400000000000000000000053401305406262000257030ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:FD4712E5-F660-4958-89FC-A69DC5244AFDhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039596493Intel64 Family 6 Model 44 Stepping 21Win32_Processor212464Intel64 Family 6 Model 44 Stepping 2CPU010060GenuineIntel2124Intel(R) Xeon(R) CPU E5645 @ 2.40GHz11false1789FBFF000206C2311266CPUCPU 1OK3Win32_ComputerSystemAMAZONA-Q2R281F10txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Product.properties000066400000000000000000000004671305406262000253350ustar00rootroot00000000000000InstallState SKUNumber IdentifyingNumber URLUpdateInfo PackageName WordCount InstallSource Version InstallDate2 URLInfoAbout LocalPackage Vendor HelpTelephone PackageCode RegOwner PackageCache Name Language Caption AssignmentType RegCompany HelpLink Description InstallLocation Transforms InstallDate ProductID txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Product_all_000.xml000066400000000000000000000037171305406262000251510ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:C98DCB52-C1BF-4D92-B705-5F4BA63FDFBBhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:903BC345-9DB3-4D54-A3FD-95D5F4FDEAC11AWS Tools for WindowsAWS Tools for Windowshttp://developer.amazonwebservices.com/connect/support.jspa{FBB0F4A0-3754-433F-8DA2-2CF3AF3D387E}20121211C:\51033C:\Windows\Installer\39e0e3.msiAWS Tools for WindowsC:\Windows\Installer\39e0e3.msi{0A1CC82F-E087-464D-AC8C-177D78581B1D}AWSToolsAndSDKForNet.msihttp://aws.amazon.com/sdkfornet/Amazon Web Services Developer Relations2.8.338.02txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Product_all_001.xml000066400000000000000000000131241305406262000251430ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:C5E7DDA2-2E1A-42BD-BA9C-B2FC43073BFAhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A01Ec2ConfigServiceEc2ConfigService{F360CB68-374D-4BE0-91D6-8A44D426FF0A}20121211C:\Users\ADMINI~1\AppData\Local\Temp\2\7ZipSfx.000\51033C:\Windows\Installer\39e0c5.msiEc2ConfigServiceC:\Windows\Installer\39e0c5.msi{16E43131-9313-45C0-B601-654C2DDC698C}Ec2ConfigSetup_x64.msiec2.amazonaws.comAmazon2.1.921Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729{4FFA2088-8317-3B14-93CD-4C699DB37843}20110305c:\1cdc0521976030d16fd6849820\51033c:\Windows\Installer\2d2926.msiMicrosoft Visual C++ 2008 Redistributable - x64 9.0.30729c:\Windows\Installer\2d2926.msi{05E90E68-0DF7-4484-8EFD-799AF70BFB86}vc_red.msiMicrosoft Corporation9.0.3072921Microsoft .NET Framework 4 ExtendedMicrosoft .NET Framework 4 Extended{8E34682C-8118-31F1-BC4C-98CD9675E1C2}20120225C:\ee6c370f539db040b44cbd5f9c120a\50C:\Windows\Installer\2d2934.msiMicrosoft .NET Framework 4 ExtendedC:\Windows\Installer\2d2934.msi{276A40EA-DCA8-426C-883E-A50A46E70736}netfx_Extended_x64.msihttp://go.microsoft.com/fwlink/?LinkId=164164http://go.microsoft.com/fwlink/?LinkId=164165Microsoft Corporation4.0.3031901Microsoft .NET Framework 4 Client ProfileMicrosoft .NET Framework 4 Client Profile{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}20121113C:\ee6c370f539db040b44cbd5f9c120a\50C:\Windows\Installer\2d292f.msiMicrosoft .NET Framework 4 Client ProfileC:\Windows\Installer\2d292f.msi{12051853-CF96-4588-AED7-926AA73006BF}netfx_Core_x64.msihttp://go.microsoft.com/fwlink/?LinkId=164164http://go.microsoft.com/fwlink/?LinkId=164165Microsoft Corporation4.0.303190txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Product_star_000.xml000066400000000000000000000042351305406262000253460ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:4DA29510-3EDA-4935-ABE1-9098088457C5http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:653B3E76-0341-4398-A507-AEB1ED13E3791AWS Tools for WindowsAWS Tools for Windowshttp://developer.amazonwebservices.com/connect/support.jspa{FBB0F4A0-3754-433F-8DA2-2CF3AF3D387E}20121211C:\51033C:\Windows\Installer\39e0e3.msiAWS Tools for WindowsC:\Windows\Installer\39e0e3.msi{0A1CC82F-E087-464D-AC8C-177D78581B1D}AWSToolsAndSDKForNet.msihttp://aws.amazon.com/sdkfornet/Amazon Web Services Developer Relations2.8.338.02txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Product_star_001.xml000066400000000000000000000146061305406262000253520ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:A2F647F5-C4D8-4514-8204-A87BC95093B0http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A01Ec2ConfigServiceEc2ConfigService{F360CB68-374D-4BE0-91D6-8A44D426FF0A}20121211C:\Users\ADMINI~1\AppData\Local\Temp\2\7ZipSfx.000\51033C:\Windows\Installer\39e0c5.msiEc2ConfigServiceC:\Windows\Installer\39e0c5.msi{16E43131-9313-45C0-B601-654C2DDC698C}Ec2ConfigSetup_x64.msiec2.amazonaws.comAmazon2.1.921Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729{4FFA2088-8317-3B14-93CD-4C699DB37843}20110305c:\1cdc0521976030d16fd6849820\51033c:\Windows\Installer\2d2926.msiMicrosoft Visual C++ 2008 Redistributable - x64 9.0.30729c:\Windows\Installer\2d2926.msi{05E90E68-0DF7-4484-8EFD-799AF70BFB86}vc_red.msiMicrosoft Corporation9.0.3072921Microsoft .NET Framework 4 ExtendedMicrosoft .NET Framework 4 Extended{8E34682C-8118-31F1-BC4C-98CD9675E1C2}20120225C:\ee6c370f539db040b44cbd5f9c120a\50C:\Windows\Installer\2d2934.msiMicrosoft .NET Framework 4 ExtendedC:\Windows\Installer\2d2934.msi{276A40EA-DCA8-426C-883E-A50A46E70736}netfx_Extended_x64.msihttp://go.microsoft.com/fwlink/?LinkId=164164http://go.microsoft.com/fwlink/?LinkId=164165Microsoft Corporation4.0.3031901Microsoft .NET Framework 4 Client ProfileMicrosoft .NET Framework 4 Client Profile{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}20121113C:\ee6c370f539db040b44cbd5f9c120a\50C:\Windows\Installer\2d292f.msiMicrosoft .NET Framework 4 Client ProfileC:\Windows\Installer\2d292f.msi{12051853-CF96-4588-AED7-926AA73006BF}netfx_Core_x64.msihttp://go.microsoft.com/fwlink/?LinkId=164164http://go.microsoft.com/fwlink/?LinkId=164165Microsoft Corporation4.0.303190txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Service.properties000066400000000000000000000004351305406262000253100ustar00rootroot00000000000000DisplayName ServiceSpecificExitCode State SystemName ErrorControl Status ProcessId Description Started AcceptStop CheckPoint PathName WaitHint Name InstallDate Caption StartMode DesktopInteract ServiceType TagId StartName AcceptPause CreationClassName SystemCreationClassName ExitCode txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Service_all_000.xml000066400000000000000000000034721305406262000251270ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:C4BF2313-A94F-4EF7-B898-0F6E71C43632http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:397B8750-3E7F-41E6-A889-38436FB1C80AfalsefalseApplication Experience0Win32_ServiceProcesses application compatibility cache requests for applications as they are launchedfalseApplication ExperienceNormal1077AeLookupSvcC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Service_all_001.xml000066400000000000000000002243711305406262000251330ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:959AD07C-BC3F-4126-8268-EE73FE95E923http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:A95FFF7D-727B-44BE-93BA-9B1197E505E2falsefalseApplication Layer Gateway Service0Win32_ServiceProvides support for 3rd party protocol plug-ins for Internet Connection SharingfalseApplication Layer Gateway ServiceNormal1077ALGC:\Windows\System32\alg.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseApplication Identity0Win32_ServiceDetermines and verifies the identity of an application. Disabling this service will prevent AppLocker from being enforced.falseApplication IdentityNormal1077AppIDSvcC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseApplication Information0Win32_ServiceFacilitates the running of interactive applications with additional administrative privileges. If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.falseApplication InformationNormal1077AppinfoC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseApplication Management0Win32_ServiceProcesses installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.falseApplication ManagementNormal1077AppMgmtC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseASP.NET State Service0Win32_ServiceProvides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start.falseASP.NET State ServiceNormal1077aspnet_stateC:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Audio Endpoint Builder0Win32_ServiceManages audio devices for the Windows Audio service. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to startfalseWindows Audio Endpoint BuilderNormal1077AudioEndpointBuilderC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Audio0Win32_ServiceManages audio for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to startfalseWindows AudioNormal1077AudioSrvC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueBase Filtering Engine0Win32_ServiceThe Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.falseBase Filtering EngineNormal0BFEC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork10000Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseBackground Intelligent Transfer Service0Win32_ServiceTransfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.falseBackground Intelligent Transfer ServiceNormal1077BITSC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseComputer Browser0Win32_ServiceMaintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.falseComputer BrowserNormal1077BrowserC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueCertificate Propagation0Win32_ServiceCopies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver.falseCertificate PropagationNormal0CertPropSvcC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft .NET Framework NGEN v2.0.50727_X860Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v2.0.50727_X86Ignore1077clr_optimization_v2.0.50727_32C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft .NET Framework NGEN v2.0.50727_X640Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v2.0.50727_X64Ignore1077clr_optimization_v2.0.50727_64C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft .NET Framework NGEN v4.0.30319_X860Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v4.0.30319_X86Ignore0clr_optimization_v4.0.30319_32C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft .NET Framework NGEN v4.0.30319_X640Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v4.0.30319_X64Ignore0clr_optimization_v4.0.30319_64C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseCOM+ System Application0Win32_ServiceManages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ System ApplicationNormal1077COMSysAppC:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueCryptographic Services0Win32_ServiceProvides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCryptographic ServicesNormal0CryptSvcC:\Windows\system32\svchost.exe -k NetworkService9000Share ProcesstrueAutoNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseDCOM Server Process Launcher0Win32_ServiceThe DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running.falseDCOM Server Process LauncherNormal0DcomLaunchC:\Windows\system32\svchost.exe -k DcomLaunch5480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseDisk Defragmenter0Win32_ServiceProvides Disk Defragmentation Capabilities.falseDisk DefragmenterNormal1077defragsvcC:\Windows\system32\svchost.exe -k defragsvc00Own ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDHCP Client0Win32_ServiceRegisters and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.falseDHCP ClientNormal0DhcpC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted7040Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDNS Client0Win32_ServiceThe DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computer's name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start.falseDNS ClientNormal0DnscacheC:\Windows\system32\svchost.exe -k NetworkService9000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWired AutoConfig0Win32_ServiceThe Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service.falseWired AutoConfigNormal1077dot3svcC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDiagnostic Policy Service0Win32_ServiceThe Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components. If this service is stopped, diagnostics will no longer function.falseDiagnostic Policy ServiceNormal0DPSC:\Windows\System32\svchost.exe -k LocalServiceNoNetwork10000Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseExtensible Authentication Protocol0Win32_ServiceThe Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP). EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process. If you disable this service, this computer is prevented from accessing networks that require EAP authentication.falseExtensible Authentication ProtocolNormal1077EapHostC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueEc2Config0Win32_ServiceEc2 Configuration ServicefalseEc2ConfigNormal0Ec2Config"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"11040Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseEncrypting File System (EFS)0Win32_ServiceProvides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.falseEncrypting File System (EFS)Normal1077EFSC:\Windows\System32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Event Log0Win32_ServiceThis service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.falseWindows Event LogNormal0eventlogC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted7040Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueCOM+ Event System0Win32_ServiceSupports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ Event SystemNormal0EventSystemC:\Windows\system32\svchost.exe -k LocalService8080Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft Fibre Channel Platform Registration Service0Win32_ServiceRegisters the platform with all available Fibre Channel fabrics, and maintains the registrations.falseMicrosoft Fibre Channel Platform Registration ServiceNormal1077FCRegSvcC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseFunction Discovery Provider Host0Win32_ServiceThe FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services – Discovery (WS-D) protocol. Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources.falseFunction Discovery Provider HostNormal1077fdPHostC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseFunction Discovery Resource Publication0Win32_ServicePublishes this computer and resources attached to this computer so they can be discovered over the network. If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.falseFunction Discovery Resource PublicationNormal1077FDResPubC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Font Cache Service0Win32_ServiceOptimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance.falseWindows Font Cache ServiceNormal0FontCacheC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation19840Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Presentation Foundation Font Cache 3.0.0.00Win32_ServiceOptimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.falseWindows Presentation Foundation Font Cache 3.0.0.0Normal1077FontCache3.0.0.0C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe00Own ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueGroup Policy Client0Win32_ServiceThe service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is stopped or disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is stopped or disabled.falseGroup Policy ClientNormal0gpsvcC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseHuman Interface Device Access0Win32_ServiceEnables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.falseHuman Interface Device AccessNormal1077hidservC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseHealth Key and Certificate Management0Win32_ServiceProvides X.509 certificate and key management services for the Network Access Protection Agent (NAPAgent). Enforcement technologies that use X.509 certificates may not function properly without this servicefalseHealth Key and Certificate ManagementNormal1077hkmsvcC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows CardSpace0Win32_ServiceSecurely enables the creation, management, and disclosure of digital identities.falseWindows CardSpaceNormal1077idsvc"C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe"00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseIKE and AuthIP IPsec Keying Modules0Win32_ServiceThe IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.falseIKE and AuthIP IPsec Keying ModulesNormal1077IKEEXTC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePnP-X IP Bus Enumerator0Win32_ServiceThe PnP-X bus enumerator service manages the virtual network bus. It discovers network connected devices using the SSDP/WS discovery protocols and gives them presence in PnP. If this service is stopped or disabled, presence of NCD devices will not be maintained in PnP. All pnpx based scenarios will stop functioning.falsePnP-X IP Bus EnumeratorNormal1077IPBusEnumC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueIP Helper0Win32_ServiceProvides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.falseIP HelperNormal0iphlpsvcC:\Windows\System32\svchost.exe -k NetSvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseCNG Key Isolation0Win32_ServiceThe CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.falseCNG Key IsolationNormal1077KeyIsoC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseKtmRm for Distributed Transaction Coordinator0Win32_ServiceCoordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it is recommended that this service remain stopped. If it is needed, both MSDTC and KTM will start this service automatically. If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start.falseKtmRm for Distributed Transaction CoordinatorNormal1077KtmRmC:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00truetrueServer0Win32_ServiceSupports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseServerNormal0LanmanServerC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00truetrueWorkstation0Win32_ServiceCreates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWorkstationNormal0LanmanWorkstationC:\Windows\System32\svchost.exe -k NetworkService9000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseLink-Layer Topology Discovery Mapper0Win32_ServiceCreates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device. If this service is disabled, the Network Map will not function properly.falseLink-Layer Topology Discovery MapperNormal1077lltdsvcC:\Windows\System32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueTCP/IP NetBIOS Helper0Win32_ServiceProvides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseTCP/IP NetBIOS HelperNormal0lmhostsC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted7040Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMultimedia Class Scheduler0Win32_ServiceEnables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications. If this service is stopped, individual tasks resort to their default priority.falseMultimedia Class SchedulerNormal1077MMCSSC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Firewall0Win32_ServiceWindows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.falseWindows FirewallNormal0MpsSvcC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork10000Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDistributed Transaction Coordinator0Win32_ServiceCoordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will fail. If this service is disabled, any services that explicitly depend on it will fail to start.falseDistributed Transaction CoordinatorNormal0MSDTCC:\Windows\System32\msdtc.exe19400Own ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft iSCSI Initiator Service0Win32_ServiceManages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start.falseMicrosoft iSCSI Initiator ServiceNormal1077MSiSCSIC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Installer0Win32_ServiceAdds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows InstallerNormal0msiserverC:\Windows\system32\msiexec.exe /V27000Own ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNetwork Access Protection Agent0Win32_ServiceThe Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.falseNetwork Access Protection AgentNormal1077napagentC:\Windows\System32\svchost.exe -k NetworkService00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNetlogon0Win32_ServiceMaintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.falseNetlogonNormal1077NetlogonC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueNetwork Connections0Win32_ServiceManages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.falseNetwork ConnectionsNormal0NetmanC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted8560Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNet.Msmq Listener Adapter0Win32_ServiceReceives activation requests over the net.msmq and msmq.formatname protocols and passes them to the Windows Process Activation Service.falseNet.Msmq Listener AdapterNormal1077NetMsmqActivator"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator00Share ProcessfalseDisabledNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNet.Pipe Listener Adapter0Win32_ServiceReceives activation requests over the net.pipe protocol and passes them to the Windows Process Activation Service.falseNet.Pipe Listener AdapterNormal1077NetPipeActivatorC:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueNetwork List Service0Win32_ServiceIdentifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.falseNetwork List ServiceNormal0netprofmC:\Windows\System32\svchost.exe -k LocalService8080Share ProcesstrueManualNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNet.Tcp Listener Adapter0Win32_ServiceReceives activation requests over the net.tcp protocol and passes them to the Windows Process Activation Service.falseNet.Tcp Listener AdapterNormal1077NetTcpActivatorC:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNet.Tcp Port Sharing Service0Win32_ServiceProvides ability to share TCP ports over the net.tcp protocol.falseNet.Tcp Port Sharing ServiceNormal1077NetTcpPortSharingC:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Service_all_002.xml000066400000000000000000002233471305406262000251360ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:615D1E4E-CA59-415B-A4A4-85D23309AB35http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:8366AC7D-2A20-4B9A-A1D5-4A88DA7F9FBFfalsetrueNetwork Location Awareness0Win32_ServiceCollects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseNetwork Location AwarenessNormal0NlaSvcC:\Windows\System32\svchost.exe -k NetworkService9000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueNetwork Store Interface Service0Win32_ServiceThis service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. Stopping this service will cause loss of network connectivity. If this service is disabled, any other services that explicitly depend on this service will fail to start.falseNetwork Store Interface ServiceNormal0nsiC:\Windows\system32\svchost.exe -k LocalService8080Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePerformance Counter DLL Host0Win32_ServiceEnables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs.falsePerformance Counter DLL HostNormal1077PerfHostC:\Windows\SysWow64\perfhost.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePerformance Logs & Alerts0Win32_ServicePerformance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.falsePerformance Logs & AlertsNormal1077plaC:\Windows\System32\svchost.exe -k LocalServiceNoNetwork00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePlug and Play0Win32_ServiceEnables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.falsePlug and PlayNormal0PlugPlayC:\Windows\system32\svchost.exe -k DcomLaunch5480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseIPsec Policy Agent0Win32_ServiceInternet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec". If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. Also,remote management of Windows Firewall is not available when this service is stopped.falseIPsec Policy AgentNormal1077PolicyAgentC:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted00Share ProcessfalseManualNT Authority\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePower0Win32_ServiceManages power policy and power policy notification delivery.falsePowerNormal0PowerC:\Windows\system32\svchost.exe -k DcomLaunch5480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueUser Profile Service0Win32_ServiceThis service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully logon or logoff, applications may have problems getting to users' data, and components registered to receive profile event notifications will not receive them.falseUser Profile ServiceNormal0ProfSvcC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseProtected Storage0Win32_ServiceProvides protected storage for sensitive data, such as passwords, to prevent access by unauthorized services, processes, or users.falseProtected StorageNormal1077ProtectedStorageC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRemote Access Auto Connection Manager0Win32_ServiceCreates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.falseRemote Access Auto Connection ManagerNormal1077RasAutoC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRemote Access Connection Manager0Win32_ServiceManages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemote Access Connection ManagerNormal1077RasManC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRouting and Remote Access0Win32_ServiceOffers routing services to businesses in local area and wide area network environments.falseRouting and Remote AccessNormal1077RemoteAccessC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledlocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueRemote Registry0Win32_ServiceEnables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemote RegistryNormal0RemoteRegistryC:\Windows\system32\svchost.exe -k regsvc8280Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetruerhelsvc0Win32_ServicefalserhelsvcNormal0rhelsvcC:\Windows\system32\rhelsvc.exe10560Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRPC Endpoint Mapper0Win32_ServiceResolves RPC interfaces identifiers to transport endpoints. If this service is stopped or disabled, programs using Remote Procedure Call (RPC) services will not function properly.falseRPC Endpoint MapperNormal0RpcEptMapperC:\Windows\system32\svchost.exe -k RPCSS6240Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRemote Procedure Call (RPC) Locator0Win32_ServiceIn Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility.falseRemote Procedure Call (RPC) LocatorNormal1077RpcLocatorC:\Windows\system32\locator.exe00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRemote Procedure Call (RPC)0Win32_ServiceThe RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service runningfalseRemote Procedure Call (RPC)Normal0RpcSsC:\Windows\system32\svchost.exe -k rpcss6240Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseResultant Set of Policy Provider0Win32_ServiceProvides a network service that processes requests to simulate application of Group Policy settings for a target user or computer in various situations and computes the Resultant Set of Policy settings.falseResultant Set of Policy ProviderNormal1077RSoPProvC:\Windows\system32\RSoPProv.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSpecial Administration Console Helper0Win32_ServiceAllows administrators to remotely access a command prompt using Emergency Management Services.falseSpecial Administration Console HelperNormal1077sacsvrC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSecurity Accounts Manager0Win32_ServiceThe startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.falseSecurity Accounts ManagerNormal0SamSsC:\Windows\system32\lsass.exe4480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSmart Card0Win32_ServiceManages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.falseSmart CardNormal1077SCardSvrC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueTask Scheduler0Win32_ServiceEnables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.falseTask SchedulerNormal0ScheduleC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSmart Card Removal Policy0Win32_ServiceAllows the system to be configured to lock the user desktop upon smart card removal.falseSmart Card Removal PolicyNormal1077SCPolicySvcC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSecondary Logon0Win32_ServiceEnables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseSecondary LogonNormal1077seclogonC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueSystem Event Notification Service0Win32_ServiceMonitors system events and notifies subscribers to COM+ Event System of these events.falseSystem Event Notification ServiceNormal0SENSC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueRemote Desktop Configuration0Win32_ServiceRemote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and RD certificates.falseRemote Desktop ConfigurationNormal0SessionEnvC:\Windows\System32\svchost.exe -k netsvcs7560Share ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseInternet Connection Sharing (ICS)0Win32_ServiceProvides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.falseInternet Connection Sharing (ICS)Normal1077SharedAccessC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueShell Hardware Detection0Win32_ServiceProvides notifications for AutoPlay hardware events.falseShell Hardware DetectionIgnore0ShellHWDetectionC:\Windows\System32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSNMP Trap0Win32_ServiceReceives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start.falseSNMP TrapNormal1077SNMPTRAPC:\Windows\System32\snmptrap.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetruePrint Spooler0Win32_ServiceLoads files to memory for later printingtruePrint SpoolerNormal0SpoolerC:\Windows\System32\spoolsv.exe2600Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSoftware Protection0Win32_ServiceEnables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service.falseSoftware ProtectionNormal0sppsvcC:\Windows\system32\sppsvc.exe00Own ProcessfalseAutoNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSPP Notification Service0Win32_ServiceProvides Software Licensing activation and notificationfalseSPP Notification ServiceNormal1077sppuinotifyC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSSDP Discovery0Win32_ServiceDiscovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start.falseSSDP DiscoveryNormal1077SSDPSRVC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSecure Socket Tunneling Protocol Service0Win32_ServiceProvides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. If this service is disabled, users will not be able to use SSTP to access remote servers.falseSecure Socket Tunneling Protocol ServiceNormal1077SstpSvcC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft Software Shadow Copy Provider0Win32_ServiceManages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.falseMicrosoft Software Shadow Copy ProviderNormal1077swprvC:\Windows\System32\svchost.exe -k swprv00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseTelephony0Win32_ServiceProvides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.falseTelephonyNormal1077TapiSrvC:\Windows\System32\svchost.exe -k tapisrv00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseTPM Base Services0Win32_ServiceEnables access to the Trusted Platform Module (TPM), which provides hardware-based cryptographic services to system components and applications. If this service is stopped or disabled, applications will be unable to use keys protected by the TPM.falseTPM Base ServicesNormal1077TBSC:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueRemote Desktop Services0Win32_ServiceAllows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.falseRemote Desktop ServicesNormal0TermServiceC:\Windows\System32\svchost.exe -k termsvcs14840Share ProcesstrueManualNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseThread Ordering Server0Win32_ServiceProvides ordered execution for a group of threads within a specific period of time.falseThread Ordering ServerNormal1077THREADORDERC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDistributed Link Tracking Client0Win32_ServiceMaintains links between NTFS files within a computer or across computers in a network.falseDistributed Link Tracking ClientNormal0TrkWksC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted8560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Modules Installer0Win32_ServiceEnables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer.falseWindows Modules InstallerNormal1077TrustedInstallerC:\Windows\servicing\TrustedInstaller.exe00Own ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseInteractive Services Detection0Win32_ServiceEnables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. If this service is stopped, notifications of new interactive service dialogs will no longer function and there might not be access to interactive service dialogs. If this service is disabled, both notifications of and access to new interactive service dialogs will no longer function.trueInteractive Services DetectionNormal1077UI0DetectC:\Windows\system32\UI0Detect.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueRemote Desktop Services UserMode Port Redirector0Win32_ServiceAllows the redirection of Printers/Drives/Ports for RDP connectionsfalseRemote Desktop Services UserMode Port RedirectorNormal0UmRdpServiceC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted8560Share ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseUPnP Device Host0Win32_ServiceAllows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start.falseUPnP Device HostNormal1077upnphostC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDesktop Window Manager Session Manager0Win32_ServiceProvides Desktop Window Manager startup and maintenance servicesfalseDesktop Window Manager Session ManagerNormal0UxSmsC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted8560Share ProcesstrueAutolocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseCredential Manager0Win32_ServiceProvides secure storage and retrieval of credentials to users, applications and security service packages.falseCredential ManagerNormal1077VaultSvcC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseVirtual Disk0Win32_ServiceProvides management services for disks, volumes, file systems, and storage arrays.falseVirtual DiskNormal1077vdsC:\Windows\System32\vds.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseVolume Shadow Copy0Win32_ServiceManages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.falseVolume Shadow CopyNormal1077VSSC:\Windows\system32\vssvc.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Time0Win32_ServiceMaintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows TimeNormal0W32TimeC:\Windows\System32\svchost.exe -k LocalService8080Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Color System0Win32_ServiceThe WcsPlugInService service hosts third-party Windows Color System color device model and gamut map model plug-in modules. These plug-in modules are vendor-specific extensions to the Windows Color System baseline color device and gamut map models. Stopping or disabling the WcsPlugInService service will disable this extensibility feature, and the Windows Color System will use its baseline model processing rather than the vendor's desired processing. This might result in inaccurate color rendering.falseWindows Color SystemNormal1077WcsPlugInServiceC:\Windows\system32\svchost.exe -k wcssvc00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseDiagnostic Service Host0Win32_ServiceThe Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context. If this service is stopped, any diagnostics that depend on it will no longer function.falseDiagnostic Service HostNormal1077WdiServiceHostC:\Windows\System32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseDiagnostic System Host0Win32_ServiceThe Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context. If this service is stopped, any diagnostics that depend on it will no longer function.falseDiagnostic System HostNormal0WdiSystemHostC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Event Collector0Win32_ServiceThis service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.falseWindows Event CollectorNormal1077WecsvcC:\Windows\system32\svchost.exe -k NetworkService00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseProblem Reports and Solutions Control Panel Support0Win32_ServiceThis service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel.falseProblem Reports and Solutions Control Panel SupportNormal1077wercplsupportC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Error Reporting Service0Win32_ServiceAllows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.falseWindows Error Reporting ServiceIgnore1077WerSvcC:\Windows\System32\svchost.exe -k WerSvcGroup00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWinHTTP Web Proxy Auto-Discovery Service0Win32_ServiceWinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol.falseWinHTTP Web Proxy Auto-Discovery ServiceNormal0WinHttpAutoProxySvcC:\Windows\system32\svchost.exe -k LocalService8080Share ProcesstrueManualNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00truetrueWindows Management Instrumentation0Win32_ServiceProvides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows Management InstrumentationIgnore0WinmgmtC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutolocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Remote Management (WS-Management)0Win32_ServiceWindows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine. The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.falseWindows Remote Management (WS-Management)Normal0WinRMC:\Windows\System32\svchost.exe -k NetworkService9000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWMI Performance Adapter0Win32_ServiceProvides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated.falseWMI Performance AdapterNormal0wmiApSrvC:\Windows\system32\wbem\WmiApSrv.exe20640Own ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePortable Device Enumerator Service0Win32_ServiceEnforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.falsePortable Device Enumerator ServiceNormal0WPDBusEnumC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Service_all_003.xml000066400000000000000000000060521305406262000251270ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:B70E19B0-9D94-44A8-84E8-F85A2653D6E8http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0falsetrueWindows Update0Win32_ServiceEnables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API.falseWindows UpdateNormal0wuauservC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Driver Foundation - User-mode Driver Framework0Win32_ServiceCreates and manages user-mode driver processes. This service cannot be stopped.falseWindows Driver Foundation - User-mode Driver FrameworkNormal1077wudfsvcC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Service_star_000.xml000066400000000000000000000040201305406262000253160ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:E5B864BB-2B7E-4A20-923B-3511BDF2D362http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:6854B090-BBDB-486B-B750-5BF34D000933falsefalseApplication Experience0Win32_ServiceProcesses application compatibility cache requests for applications as they are launchedfalseApplication ExperienceNormal1077AeLookupSvcC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Service_star_001.xml000066400000000000000000002235431305406262000253340ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:F7A88BE5-FE34-4B48-90D5-FF59DBE20B1Chttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:C47EADBE-5F58-4D6D-AE36-B2C977F10FA5falsefalseApplication Layer Gateway Service0Win32_ServiceProvides support for 3rd party protocol plug-ins for Internet Connection SharingfalseApplication Layer Gateway ServiceNormal1077ALGC:\Windows\System32\alg.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseApplication Identity0Win32_ServiceDetermines and verifies the identity of an application. Disabling this service will prevent AppLocker from being enforced.falseApplication IdentityNormal1077AppIDSvcC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseApplication Information0Win32_ServiceFacilitates the running of interactive applications with additional administrative privileges. If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.falseApplication InformationNormal1077AppinfoC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseApplication Management0Win32_ServiceProcesses installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.falseApplication ManagementNormal1077AppMgmtC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseASP.NET State Service0Win32_ServiceProvides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start.falseASP.NET State ServiceNormal1077aspnet_stateC:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Audio Endpoint Builder0Win32_ServiceManages audio devices for the Windows Audio service. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to startfalseWindows Audio Endpoint BuilderNormal1077AudioEndpointBuilderC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Audio0Win32_ServiceManages audio for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to startfalseWindows AudioNormal1077AudioSrvC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueBase Filtering Engine0Win32_ServiceThe Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.falseBase Filtering EngineNormal0BFEC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork10000Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseBackground Intelligent Transfer Service0Win32_ServiceTransfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.falseBackground Intelligent Transfer ServiceNormal1077BITSC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseComputer Browser0Win32_ServiceMaintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.falseComputer BrowserNormal1077BrowserC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueCertificate Propagation0Win32_ServiceCopies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver.falseCertificate PropagationNormal0CertPropSvcC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft .NET Framework NGEN v2.0.50727_X860Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v2.0.50727_X86Ignore1077clr_optimization_v2.0.50727_32C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft .NET Framework NGEN v2.0.50727_X640Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v2.0.50727_X64Ignore1077clr_optimization_v2.0.50727_64C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe00Own ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft .NET Framework NGEN v4.0.30319_X860Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v4.0.30319_X86Ignore0clr_optimization_v4.0.30319_32C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft .NET Framework NGEN v4.0.30319_X640Win32_ServiceMicrosoft .NET Framework NGENfalseMicrosoft .NET Framework NGEN v4.0.30319_X64Ignore0clr_optimization_v4.0.30319_64C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe00Own ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseCOM+ System Application0Win32_ServiceManages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ System ApplicationNormal1077COMSysAppC:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueCryptographic Services0Win32_ServiceProvides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCryptographic ServicesNormal0CryptSvcC:\Windows\system32\svchost.exe -k NetworkService9000Share ProcesstrueAutoNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseDCOM Server Process Launcher0Win32_ServiceThe DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running.falseDCOM Server Process LauncherNormal0DcomLaunchC:\Windows\system32\svchost.exe -k DcomLaunch5480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseDisk Defragmenter0Win32_ServiceProvides Disk Defragmentation Capabilities.falseDisk DefragmenterNormal1077defragsvcC:\Windows\system32\svchost.exe -k defragsvc00Own ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDHCP Client0Win32_ServiceRegisters and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.falseDHCP ClientNormal0DhcpC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted7040Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDNS Client0Win32_ServiceThe DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computer's name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start.falseDNS ClientNormal0DnscacheC:\Windows\system32\svchost.exe -k NetworkService9000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWired AutoConfig0Win32_ServiceThe Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service.falseWired AutoConfigNormal1077dot3svcC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDiagnostic Policy Service0Win32_ServiceThe Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components. If this service is stopped, diagnostics will no longer function.falseDiagnostic Policy ServiceNormal0DPSC:\Windows\System32\svchost.exe -k LocalServiceNoNetwork10000Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseExtensible Authentication Protocol0Win32_ServiceThe Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP). EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process. If you disable this service, this computer is prevented from accessing networks that require EAP authentication.falseExtensible Authentication ProtocolNormal1077EapHostC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueEc2Config0Win32_ServiceEc2 Configuration ServicefalseEc2ConfigNormal0Ec2Config"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"11040Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseEncrypting File System (EFS)0Win32_ServiceProvides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.falseEncrypting File System (EFS)Normal1077EFSC:\Windows\System32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Event Log0Win32_ServiceThis service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.falseWindows Event LogNormal0eventlogC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted7040Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueCOM+ Event System0Win32_ServiceSupports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ Event SystemNormal0EventSystemC:\Windows\system32\svchost.exe -k LocalService8080Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft Fibre Channel Platform Registration Service0Win32_ServiceRegisters the platform with all available Fibre Channel fabrics, and maintains the registrations.falseMicrosoft Fibre Channel Platform Registration ServiceNormal1077FCRegSvcC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseFunction Discovery Provider Host0Win32_ServiceThe FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services – Discovery (WS-D) protocol. Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources.falseFunction Discovery Provider HostNormal1077fdPHostC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseFunction Discovery Resource Publication0Win32_ServicePublishes this computer and resources attached to this computer so they can be discovered over the network. If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.falseFunction Discovery Resource PublicationNormal1077FDResPubC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Font Cache Service0Win32_ServiceOptimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance.falseWindows Font Cache ServiceNormal0FontCacheC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation19840Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Presentation Foundation Font Cache 3.0.0.00Win32_ServiceOptimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.falseWindows Presentation Foundation Font Cache 3.0.0.0Normal1077FontCache3.0.0.0C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe00Own ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueGroup Policy Client0Win32_ServiceThe service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is stopped or disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is stopped or disabled.falseGroup Policy ClientNormal0gpsvcC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseHuman Interface Device Access0Win32_ServiceEnables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.falseHuman Interface Device AccessNormal1077hidservC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseHealth Key and Certificate Management0Win32_ServiceProvides X.509 certificate and key management services for the Network Access Protection Agent (NAPAgent). Enforcement technologies that use X.509 certificates may not function properly without this servicefalseHealth Key and Certificate ManagementNormal1077hkmsvcC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows CardSpace0Win32_ServiceSecurely enables the creation, management, and disclosure of digital identities.falseWindows CardSpaceNormal1077idsvc"C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe"00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseIKE and AuthIP IPsec Keying Modules0Win32_ServiceThe IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.falseIKE and AuthIP IPsec Keying ModulesNormal1077IKEEXTC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePnP-X IP Bus Enumerator0Win32_ServiceThe PnP-X bus enumerator service manages the virtual network bus. It discovers network connected devices using the SSDP/WS discovery protocols and gives them presence in PnP. If this service is stopped or disabled, presence of NCD devices will not be maintained in PnP. All pnpx based scenarios will stop functioning.falsePnP-X IP Bus EnumeratorNormal1077IPBusEnumC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueIP Helper0Win32_ServiceProvides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.falseIP HelperNormal0iphlpsvcC:\Windows\System32\svchost.exe -k NetSvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseCNG Key Isolation0Win32_ServiceThe CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.falseCNG Key IsolationNormal1077KeyIsoC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseKtmRm for Distributed Transaction Coordinator0Win32_ServiceCoordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it is recommended that this service remain stopped. If it is needed, both MSDTC and KTM will start this service automatically. If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start.falseKtmRm for Distributed Transaction CoordinatorNormal1077KtmRmC:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00truetrueServer0Win32_ServiceSupports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseServerNormal0LanmanServerC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00truetrueWorkstation0Win32_ServiceCreates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWorkstationNormal0LanmanWorkstationC:\Windows\System32\svchost.exe -k NetworkService9000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseLink-Layer Topology Discovery Mapper0Win32_ServiceCreates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device. If this service is disabled, the Network Map will not function properly.falseLink-Layer Topology Discovery MapperNormal1077lltdsvcC:\Windows\System32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueTCP/IP NetBIOS Helper0Win32_ServiceProvides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseTCP/IP NetBIOS HelperNormal0lmhostsC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted7040Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMultimedia Class Scheduler0Win32_ServiceEnables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications. If this service is stopped, individual tasks resort to their default priority.falseMultimedia Class SchedulerNormal1077MMCSSC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Firewall0Win32_ServiceWindows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.falseWindows FirewallNormal0MpsSvcC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork10000Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDistributed Transaction Coordinator0Win32_ServiceCoordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will fail. If this service is disabled, any services that explicitly depend on it will fail to start.falseDistributed Transaction CoordinatorNormal0MSDTCC:\Windows\System32\msdtc.exe19400Own ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft iSCSI Initiator Service0Win32_ServiceManages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start.falseMicrosoft iSCSI Initiator ServiceNormal1077MSiSCSIC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Service_star_002.xml000066400000000000000000002236141305406262000253340ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:2FB50462-704F-4E9F-A5C9-F318A373B660http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:6C79B05D-4FB2-4CD2-8ECC-480429BC12BBfalsetrueWindows Installer0Win32_ServiceAdds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows InstallerNormal0msiserverC:\Windows\system32\msiexec.exe /V27000Own ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNetwork Access Protection Agent0Win32_ServiceThe Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.falseNetwork Access Protection AgentNormal1077napagentC:\Windows\System32\svchost.exe -k NetworkService00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNetlogon0Win32_ServiceMaintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.falseNetlogonNormal1077NetlogonC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueNetwork Connections0Win32_ServiceManages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.falseNetwork ConnectionsNormal0NetmanC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted8560Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNet.Msmq Listener Adapter0Win32_ServiceReceives activation requests over the net.msmq and msmq.formatname protocols and passes them to the Windows Process Activation Service.falseNet.Msmq Listener AdapterNormal1077NetMsmqActivator"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator00Share ProcessfalseDisabledNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNet.Pipe Listener Adapter0Win32_ServiceReceives activation requests over the net.pipe protocol and passes them to the Windows Process Activation Service.falseNet.Pipe Listener AdapterNormal1077NetPipeActivatorC:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueNetwork List Service0Win32_ServiceIdentifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.falseNetwork List ServiceNormal0netprofmC:\Windows\System32\svchost.exe -k LocalService8080Share ProcesstrueManualNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNet.Tcp Listener Adapter0Win32_ServiceReceives activation requests over the net.tcp protocol and passes them to the Windows Process Activation Service.falseNet.Tcp Listener AdapterNormal1077NetTcpActivatorC:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseNet.Tcp Port Sharing Service0Win32_ServiceProvides ability to share TCP ports over the net.tcp protocol.falseNet.Tcp Port Sharing ServiceNormal1077NetTcpPortSharingC:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueNetwork Location Awareness0Win32_ServiceCollects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseNetwork Location AwarenessNormal0NlaSvcC:\Windows\System32\svchost.exe -k NetworkService9000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueNetwork Store Interface Service0Win32_ServiceThis service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. Stopping this service will cause loss of network connectivity. If this service is disabled, any other services that explicitly depend on this service will fail to start.falseNetwork Store Interface ServiceNormal0nsiC:\Windows\system32\svchost.exe -k LocalService8080Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePerformance Counter DLL Host0Win32_ServiceEnables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs.falsePerformance Counter DLL HostNormal1077PerfHostC:\Windows\SysWow64\perfhost.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePerformance Logs & Alerts0Win32_ServicePerformance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.falsePerformance Logs & AlertsNormal1077plaC:\Windows\System32\svchost.exe -k LocalServiceNoNetwork00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePlug and Play0Win32_ServiceEnables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.falsePlug and PlayNormal0PlugPlayC:\Windows\system32\svchost.exe -k DcomLaunch5480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseIPsec Policy Agent0Win32_ServiceInternet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec". If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. Also,remote management of Windows Firewall is not available when this service is stopped.falseIPsec Policy AgentNormal1077PolicyAgentC:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted00Share ProcessfalseManualNT Authority\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePower0Win32_ServiceManages power policy and power policy notification delivery.falsePowerNormal0PowerC:\Windows\system32\svchost.exe -k DcomLaunch5480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueUser Profile Service0Win32_ServiceThis service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully logon or logoff, applications may have problems getting to users' data, and components registered to receive profile event notifications will not receive them.falseUser Profile ServiceNormal0ProfSvcC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseProtected Storage0Win32_ServiceProvides protected storage for sensitive data, such as passwords, to prevent access by unauthorized services, processes, or users.falseProtected StorageNormal1077ProtectedStorageC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRemote Access Auto Connection Manager0Win32_ServiceCreates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.falseRemote Access Auto Connection ManagerNormal1077RasAutoC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRemote Access Connection Manager0Win32_ServiceManages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemote Access Connection ManagerNormal1077RasManC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRouting and Remote Access0Win32_ServiceOffers routing services to businesses in local area and wide area network environments.falseRouting and Remote AccessNormal1077RemoteAccessC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledlocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueRemote Registry0Win32_ServiceEnables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemote RegistryNormal0RemoteRegistryC:\Windows\system32\svchost.exe -k regsvc8280Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetruerhelsvc0Win32_ServicefalserhelsvcNormal0rhelsvcC:\Windows\system32\rhelsvc.exe10560Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRPC Endpoint Mapper0Win32_ServiceResolves RPC interfaces identifiers to transport endpoints. If this service is stopped or disabled, programs using Remote Procedure Call (RPC) services will not function properly.falseRPC Endpoint MapperNormal0RpcEptMapperC:\Windows\system32\svchost.exe -k RPCSS6240Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRemote Procedure Call (RPC) Locator0Win32_ServiceIn Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility.falseRemote Procedure Call (RPC) LocatorNormal1077RpcLocatorC:\Windows\system32\locator.exe00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseRemote Procedure Call (RPC)0Win32_ServiceThe RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service runningfalseRemote Procedure Call (RPC)Normal0RpcSsC:\Windows\system32\svchost.exe -k rpcss6240Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseResultant Set of Policy Provider0Win32_ServiceProvides a network service that processes requests to simulate application of Group Policy settings for a target user or computer in various situations and computes the Resultant Set of Policy settings.falseResultant Set of Policy ProviderNormal1077RSoPProvC:\Windows\system32\RSoPProv.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSpecial Administration Console Helper0Win32_ServiceAllows administrators to remotely access a command prompt using Emergency Management Services.falseSpecial Administration Console HelperNormal1077sacsvrC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSecurity Accounts Manager0Win32_ServiceThe startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.falseSecurity Accounts ManagerNormal0SamSsC:\Windows\system32\lsass.exe4480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSmart Card0Win32_ServiceManages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.falseSmart CardNormal1077SCardSvrC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueTask Scheduler0Win32_ServiceEnables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.falseTask SchedulerNormal0ScheduleC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSmart Card Removal Policy0Win32_ServiceAllows the system to be configured to lock the user desktop upon smart card removal.falseSmart Card Removal PolicyNormal1077SCPolicySvcC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSecondary Logon0Win32_ServiceEnables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseSecondary LogonNormal1077seclogonC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueSystem Event Notification Service0Win32_ServiceMonitors system events and notifies subscribers to COM+ Event System of these events.falseSystem Event Notification ServiceNormal0SENSC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueRemote Desktop Configuration0Win32_ServiceRemote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and RD certificates.falseRemote Desktop ConfigurationNormal0SessionEnvC:\Windows\System32\svchost.exe -k netsvcs7560Share ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseInternet Connection Sharing (ICS)0Win32_ServiceProvides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.falseInternet Connection Sharing (ICS)Normal1077SharedAccessC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueShell Hardware Detection0Win32_ServiceProvides notifications for AutoPlay hardware events.falseShell Hardware DetectionIgnore0ShellHWDetectionC:\Windows\System32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSNMP Trap0Win32_ServiceReceives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start.falseSNMP TrapNormal1077SNMPTRAPC:\Windows\System32\snmptrap.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetruePrint Spooler0Win32_ServiceLoads files to memory for later printingtruePrint SpoolerNormal0SpoolerC:\Windows\System32\spoolsv.exe2600Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSoftware Protection0Win32_ServiceEnables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service.falseSoftware ProtectionNormal0sppsvcC:\Windows\system32\sppsvc.exe00Own ProcessfalseAutoNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSPP Notification Service0Win32_ServiceProvides Software Licensing activation and notificationfalseSPP Notification ServiceNormal1077sppuinotifyC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSSDP Discovery0Win32_ServiceDiscovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start.falseSSDP DiscoveryNormal1077SSDPSRVC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseSecure Socket Tunneling Protocol Service0Win32_ServiceProvides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. If this service is disabled, users will not be able to use SSTP to access remote servers.falseSecure Socket Tunneling Protocol ServiceNormal1077SstpSvcC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseMicrosoft Software Shadow Copy Provider0Win32_ServiceManages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.falseMicrosoft Software Shadow Copy ProviderNormal1077swprvC:\Windows\System32\svchost.exe -k swprv00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseTelephony0Win32_ServiceProvides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.falseTelephonyNormal1077TapiSrvC:\Windows\System32\svchost.exe -k tapisrv00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseTPM Base Services0Win32_ServiceEnables access to the Trusted Platform Module (TPM), which provides hardware-based cryptographic services to system components and applications. If this service is stopped or disabled, applications will be unable to use keys protected by the TPM.falseTPM Base ServicesNormal1077TBSC:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueRemote Desktop Services0Win32_ServiceAllows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.false2Remote Desktop ServicesNormal0TermServiceC:\Windows\System32\svchost.exe -k termsvcs14840Share ProcesstrueManualNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F030falsefalseThread Ordering Server0Win32_ServiceProvides ordered execution for a group of threads within a specific period of time.falseThread Ordering ServerNormal1077THREADORDERC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDistributed Link Tracking Client0Win32_ServiceMaintains links between NTFS files within a computer or across computers in a network.falseDistributed Link Tracking ClientNormal0TrkWksC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted8560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Modules Installer0Win32_ServiceEnables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer.falseWindows Modules InstallerNormal1077TrustedInstallerC:\Windows\servicing\TrustedInstaller.exe00Own ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseInteractive Services Detection0Win32_ServiceEnables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. If this service is stopped, notifications of new interactive service dialogs will no longer function and there might not be access to interactive service dialogs. If this service is disabled, both notifications of and access to new interactive service dialogs will no longer function.trueInteractive Services DetectionNormal1077UI0DetectC:\Windows\system32\UI0Detect.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueRemote Desktop Services UserMode Port Redirector0Win32_ServiceAllows the redirection of Printers/Drives/Ports for RDP connectionsfalseRemote Desktop Services UserMode Port RedirectorNormal0UmRdpServiceC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted8560Share ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Service_star_003.xml000066400000000000000000000712651305406262000253400ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:FC310146-51DA-41B1-9C6F-01C58A00486Ahttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0falsefalseUPnP Device Host0Win32_ServiceAllows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start.falseUPnP Device HostNormal1077upnphostC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueDesktop Window Manager Session Manager0Win32_ServiceProvides Desktop Window Manager startup and maintenance servicesfalseDesktop Window Manager Session ManagerNormal0UxSmsC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted8560Share ProcesstrueAutolocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseCredential Manager0Win32_ServiceProvides secure storage and retrieval of credentials to users, applications and security service packages.falseCredential ManagerNormal1077VaultSvcC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseVirtual Disk0Win32_ServiceProvides management services for disks, volumes, file systems, and storage arrays.falseVirtual DiskNormal1077vdsC:\Windows\System32\vds.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseVolume Shadow Copy0Win32_ServiceManages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.falseVolume Shadow CopyNormal1077VSSC:\Windows\system32\vssvc.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Time0Win32_ServiceMaintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows TimeNormal0W32TimeC:\Windows\System32\svchost.exe -k LocalService8080Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Color System0Win32_ServiceThe WcsPlugInService service hosts third-party Windows Color System color device model and gamut map model plug-in modules. These plug-in modules are vendor-specific extensions to the Windows Color System baseline color device and gamut map models. Stopping or disabling the WcsPlugInService service will disable this extensibility feature, and the Windows Color System will use its baseline model processing rather than the vendor's desired processing. This might result in inaccurate color rendering.falseWindows Color SystemNormal1077WcsPlugInServiceC:\Windows\system32\svchost.exe -k wcssvc00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseDiagnostic Service Host0Win32_ServiceThe Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context. If this service is stopped, any diagnostics that depend on it will no longer function.falseDiagnostic Service HostNormal1077WdiServiceHostC:\Windows\System32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseDiagnostic System Host0Win32_ServiceThe Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context. If this service is stopped, any diagnostics that depend on it will no longer function.falseDiagnostic System HostNormal0WdiSystemHostC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Event Collector0Win32_ServiceThis service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.falseWindows Event CollectorNormal1077WecsvcC:\Windows\system32\svchost.exe -k NetworkService00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseProblem Reports and Solutions Control Panel Support0Win32_ServiceThis service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel.falseProblem Reports and Solutions Control Panel SupportNormal1077wercplsupportC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Error Reporting Service0Win32_ServiceAllows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.falseWindows Error Reporting ServiceIgnore1077WerSvcC:\Windows\System32\svchost.exe -k WerSvcGroup00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWinHTTP Web Proxy Auto-Discovery Service0Win32_ServiceWinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol.falseWinHTTP Web Proxy Auto-Discovery ServiceNormal0WinHttpAutoProxySvcC:\Windows\system32\svchost.exe -k LocalService8080Share ProcesstrueManualNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00truetrueWindows Management Instrumentation0Win32_ServiceProvides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows Management InstrumentationIgnore0WinmgmtC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutolocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Remote Management (WS-Management)0Win32_ServiceWindows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine. The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.falseWindows Remote Management (WS-Management)Normal0WinRMC:\Windows\System32\svchost.exe -k NetworkService9000Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWMI Performance Adapter0Win32_ServiceProvides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated.falseWMI Performance AdapterNormal0wmiApSrvC:\Windows\system32\wbem\WmiApSrv.exe20640Own ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalsePortable Device Enumerator Service0Win32_ServiceEnforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.falsePortable Device Enumerator ServiceNormal0WPDBusEnumC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00falsetrueWindows Update0Win32_ServiceEnables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API.falseWindows UpdateNormal0wuauservC:\Windows\system32\svchost.exe -k netsvcs7560Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-Q2R281F00falsefalseWindows Driver Foundation - User-mode Driver Framework0Win32_ServiceCreates and manages user-mode driver processes. This service cannot be stopped.falseWindows Driver Foundation - User-mode Driver FrameworkNormal1077wudfsvcC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-Q2R281F00txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_SystemEnclosure.properties000066400000000000000000000006331305406262000270540ustar00rootroot00000000000000HotSwappable SKU SerialNumber Width Version Removable PartNumber AudibleAlarm Status Description NumberOfPowerCords Replaceable LockPresent Tag SecurityStatus BreachDescription Manufacturer OtherIdentifyingInfo Name InstallDate VisibleAlarm PoweredOn SMBIOSAssetTag Caption Depth Model CurrentRequiredOrProduced Weight ChassisTypes Height SecurityBreach CableManagementStrategy CreationClassName HeatGeneration txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_SystemEnclosure_all_000.xml000066400000000000000000000036051305406262000266710ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:47766D10-12A4-4BD8-92C9-6B28EBA7FBD7http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959System Enclosure1Win32_SystemEnclosureSystem EnclosurefalseXenSystem EnclosureSystem Enclosure 0txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_SystemEnclosure_star_000.xml000066400000000000000000000041631305406262000270720ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:57438170-97DB-4B1B-BCEA-341D8FF3E65Dhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959System Enclosure1Win32_SystemEnclosureSystem EnclosurefalseXenSystem EnclosureSystem Enclosure 0txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Volume.properties000066400000000000000000000011211305406262000251500ustar00rootroot00000000000000Capacity DirtyBitSet Automount SerialNumber CreationClassName Label IndexingEnabled QuotasIncomplete SystemName Access PageFilePresent Status PNPDeviceID Description ConfigManagerUserConfig ErrorCleared PowerManagementSupported QuotasEnabled Compressed FileSystem Purpose DriveLetter BootVolume Name InstallDate BlockSize Caption StatusInfo DeviceID ConfigManagerErrorCode ErrorMethodology DriveType QuotasRebuilding SupportsFileBasedCompression NumberOfBlocks FreeSpace MaximumFileNameLength SupportsDiskQuotas ErrorDescription LastErrorCode SystemVolume Availability SystemCreationClassName txwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Volume_all_000.xml000066400000000000000000000044631305406262000247770ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:47D3DDAF-0E52-4DAC-A5CA-BA4BBC69075Ahttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:229A2BD1-58B0-421F-BD25-C85CE61945A0true4096true32210153472C:\false\\?\Volume{540106a1-8865-11e2-87c5-806e6f6e6963}\falseC:3NTFS9769496576truetxwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Volume_all_001.xml000066400000000000000000000043461305406262000250000ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:8CF6AB6B-0547-4187-8911-F209C4EF6AE8http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0true4096false53683941376D:\false\\?\Volume{4640d392-8a92-11e2-bafe-cf58997df689}\falseD:3NTFS53584777216true255D:\falsefalsefalsefalse1991888029truetruefalsetxwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Volume_star_000.xml000066400000000000000000000050471305406262000251770ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:17FB9C2C-AA17-42C0-A98B-4FE642D7AD28http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:C9262011-6FB6-456C-A724-471436B64B4Etrue4096true32210153472C:\false\\?\Volume{540106a1-8865-11e2-87c5-806e6f6e6963}\falseC:3NTFS9769496576true255C:\truefalsefalsefalse3773355946truetruetruetxwinrm-1.2.7/txwinrm/test/data/server_2008/Win32_Volume_star_001.xml000066400000000000000000000047341305406262000252020ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:E3A9AC0F-7435-4B20-A484-6758CEA0167Ehttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0true4096false53683941376D:\false\\?\Volume{4640d392-8a92-11e2-bafe-cf58997df689}\falseD:3NTFS53584777216trueNew Volume255D:\falsefalsefalsefalse1991888029truetruefalsetxwinrm-1.2.7/txwinrm/test/data/server_2012/000077500000000000000000000000001305406262000206015ustar00rootroot00000000000000txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_ComputerSystem.properties000066400000000000000000000015071305406262000267070ustar00rootroot00000000000000KeyboardPasswordStatus NumberOfProcessors PowerState PowerManagementSupported LastLoadInfo WakeUpType PartOfDomain SystemStartupDelay ResetLimit DomainRole CurrentTimeZone BootOptionOnWatchDog BootROMSupported Description ResetCapability NameFormat ResetCount PauseAfterReset AutomaticResetCapability PCSystemType BootupState Manufacturer PowerOnPasswordStatus Status AdminPasswordStatus Name InstallDate HypervisorPresent AutomaticResetBootOption Caption SystemStartupSetting NumberOfLogicalProcessors FrontPanelResetStatus BootOptionOnLimit Model AutomaticManagedPagefile PowerSupplyState Workgroup NetworkServerModeEnabled Domain TotalPhysicalMemory ChassisBootupState SystemType DNSHostName UserName InfraredSupported PrimaryOwnerContact DaylightInEffect CreationClassName EnableDaylightSavingsTime Roles PrimaryOwnerName ThermalState txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_ComputerSystem_all_000.xml000066400000000000000000000056271305406262000265310ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:D5E3C464-4AB0-4AFE-9ADB-270B422283C6http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039593falsetruetruetrueNormal bootAMAZONA-SDFU7B13Win32_ComputerSystem0AT/AT COMPATIBLEAMAZONA-SDFU7B1WORKGROUP2true3truefalse3XenHVM domUAMAZONA-SDFU7B1true11false-11303Amazon1-1-1LM_WorkstationLM_ServerNTServer_NTOKx64-based PC36444687366WORKGROUPtxwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_ComputerSystem_star_000.xml000066400000000000000000000063611305406262000267260ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:EFDFAEF6-1651-472C-B840-B7413AC81FB2http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039593falsetruetruetrueNormal bootAMAZONA-SDFU7B13Win32_ComputerSystem0AT/AT COMPATIBLEAMAZONA-SDFU7B1WORKGROUP2true3truefalse3XenHVM domUAMAZONA-SDFU7B1true11false-11303Amazon1-1-1LM_WorkstationLM_ServerNTServer_NTOKx64-based PC36444687366WORKGROUPtxwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_IP4RouteTable.properties000066400000000000000000000002321305406262000262610ustar00rootroot00000000000000Status Information NextHop Protocol Description InstallDate Metric2 Age Destination Mask InterfaceIndex Metric3 Caption Metric1 Metric5 Metric4 Type Name txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_IP4RouteTable_all_000.xml000066400000000000000000000025151305406262000261020ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:5CFFBF5C-4162-4440-BCDB-82B47D154C11http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:4262BDAC-7A27-4A8D-BD79-E0D58D65EC7E143660.0.0.00.0.0.0 - 0.0.0.0 - 10.30.40.10.0.0.00.0120.0.0.010-1-1-1-10.0.0.010.30.40.134txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_IP4RouteTable_all_001.xml000066400000000000000000000213031305406262000260770ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:E130B4DB-02E7-4D09-BEE7-4356DBA5FE4Ahttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A01436610.30.40.010.30.40.0 - 255.255.255.0 - 0.0.0.010.30.40.00.012255.255.255.0266-1-1-1-110.30.40.00.0.0.0231436610.30.40.19310.30.40.193 - 255.255.255.255 - 0.0.0.010.30.40.1930.012255.255.255.255266-1-1-1-110.30.40.1930.0.0.0231436610.30.40.25510.30.40.255 - 255.255.255.255 - 0.0.0.010.30.40.2550.012255.255.255.255266-1-1-1-110.30.40.2550.0.0.02314378127.0.0.0127.0.0.0 - 255.0.0.0 - 0.0.0.0127.0.0.00.01255.0.0.0306-1-1-1-1127.0.0.00.0.0.02314378127.0.0.1127.0.0.1 - 255.255.255.255 - 0.0.0.0127.0.0.10.01255.255.255.255306-1-1-1-1127.0.0.10.0.0.02314378127.255.255.255127.255.255.255 - 255.255.255.255 - 0.0.0.0127.255.255.2550.01255.255.255.255306-1-1-1-1127.255.255.2550.0.0.02314337169.254.169.250169.254.169.250 - 255.255.255.255 - 10.30.40.1169.254.169.2500.012255.255.255.25510-1-1-1-1169.254.169.25010.30.40.13414337169.254.169.251169.254.169.251 - 255.255.255.255 - 10.30.40.1169.254.169.2510.012255.255.255.25510-1-1-1-1169.254.169.25110.30.40.13414337169.254.169.254169.254.169.254 - 255.255.255.255 - 10.30.40.1169.254.169.2540.012255.255.255.25510-1-1-1-1169.254.169.25410.30.40.13414378224.0.0.0224.0.0.0 - 240.0.0.0 - 0.0.0.0224.0.0.00.01240.0.0.0306-1-1-1-1224.0.0.00.0.0.02314375224.0.0.0224.0.0.0 - 240.0.0.0 - 0.0.0.0224.0.0.00.012240.0.0.0266-1-1-1-1224.0.0.00.0.0.02314378255.255.255.255255.255.255.255 - 255.255.255.255 - 0.0.0.0255.255.255.2550.01255.255.255.255306-1-1-1-1255.255.255.2550.0.0.02314375255.255.255.255255.255.255.255 - 255.255.255.255 - 0.0.0.0255.255.255.2550.012255.255.255.255266-1-1-1-1255.255.255.2550.0.0.023txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_IP4RouteTable_star_000.xml000066400000000000000000000030351305406262000263010ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:7B6A789D-3DBB-4D79-8BE5-C69468392D36http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:D9BFC178-4F0A-4CDF-AE78-5B780FDB21B6143660.0.0.00.0.0.0 - 0.0.0.0 - 10.30.40.10.0.0.00.0120.0.0.010-1-1-1-10.0.0.010.30.40.134txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_IP4RouteTable_star_001.xml000066400000000000000000000265231305406262000263110ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:65633EBD-DFF2-40AF-99EF-D019DE76662Chttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A01436610.30.40.010.30.40.0 - 255.255.255.0 - 0.0.0.010.30.40.00.012255.255.255.0266-1-1-1-110.30.40.00.0.0.0231436610.30.40.19310.30.40.193 - 255.255.255.255 - 0.0.0.010.30.40.1930.012255.255.255.255266-1-1-1-110.30.40.1930.0.0.0231436610.30.40.25510.30.40.255 - 255.255.255.255 - 0.0.0.010.30.40.2550.012255.255.255.255266-1-1-1-110.30.40.2550.0.0.02314378127.0.0.0127.0.0.0 - 255.0.0.0 - 0.0.0.0127.0.0.00.01255.0.0.0306-1-1-1-1127.0.0.00.0.0.02314378127.0.0.1127.0.0.1 - 255.255.255.255 - 0.0.0.0127.0.0.10.01255.255.255.255306-1-1-1-1127.0.0.10.0.0.02314378127.255.255.255127.255.255.255 - 255.255.255.255 - 0.0.0.0127.255.255.2550.01255.255.255.255306-1-1-1-1127.255.255.2550.0.0.02314337169.254.169.250169.254.169.250 - 255.255.255.255 - 10.30.40.1169.254.169.2500.012255.255.255.25510-1-1-1-1169.254.169.25010.30.40.13414337169.254.169.251169.254.169.251 - 255.255.255.255 - 10.30.40.1169.254.169.2510.012255.255.255.25510-1-1-1-1169.254.169.25110.30.40.13414337169.254.169.254169.254.169.254 - 255.255.255.255 - 10.30.40.1169.254.169.2540.012255.255.255.25510-1-1-1-1169.254.169.25410.30.40.13414378224.0.0.0224.0.0.0 - 240.0.0.0 - 0.0.0.0224.0.0.00.01240.0.0.0306-1-1-1-1224.0.0.00.0.0.02314375224.0.0.0224.0.0.0 - 240.0.0.0 - 0.0.0.0224.0.0.00.012240.0.0.0266-1-1-1-1224.0.0.00.0.0.02314378255.255.255.255255.255.255.255 - 255.255.255.255 - 0.0.0.0255.255.255.2550.01255.255.255.255306-1-1-1-1255.255.255.2550.0.0.02314375255.255.255.255255.255.255.255 - 255.255.255.255 - 0.0.0.0255.255.255.2550.012255.255.255.255266-1-1-1-1255.255.255.2550.0.0.023txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_LogicalDisk.properties000066400000000000000000000010431305406262000260640ustar00rootroot00000000000000QuotasDisabled ProviderName PowerManagementSupported Access SystemName MaximumComponentLength Status PNPDeviceID Description VolumeName ConfigManagerUserConfig ErrorCleared Compressed FileSystem SupportsFileBasedCompression Purpose QuotasIncomplete Name InstallDate BlockSize MediaType Caption StatusInfo DeviceID ConfigManagerErrorCode ErrorMethodology DriveType QuotasRebuilding VolumeDirty NumberOfBlocks FreeSpace VolumeSerialNumber SupportsDiskQuotas ErrorDescription LastErrorCode CreationClassName Availability SystemCreationClassName Size txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_LogicalDisk_all_000.xml000066400000000000000000000042541305406262000257060ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:48F13C35-B083-42FE-8676-10ED84D57EEDhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039590C:falseWin32_LogicalDiskLocal Fixed DiskC:3NTFS795557068825512C:truefalsefalse31843151872truetrueWin32_ComputerSystemAMAZONA-SDFU7B1false5E716BA3txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_LogicalDisk_star_000.xml000066400000000000000000000046541305406262000261130ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:B1F3F3B7-1E05-49D5-9A6E-0A169AF2E749http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039590C:falseWin32_LogicalDiskLocal Fixed DiskC:3NTFS795557068825512C:truefalsefalse31843151872truetrueWin32_ComputerSystemAMAZONA-SDFU7B1false5E716BA3txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_NetworkAdapterConfiguration.properties000066400000000000000000000014771305406262000313740ustar00rootroot00000000000000DHCPLeaseObtained Index WINSEnableLMHostsLookup TcpMaxDataRetransmissions DomainDNSRegistrationEnabled DatabasePath WINSHostLookupFile IPXEnabled TcpWindowSize InterfaceIndex IPUseZeroBroadcast DHCPLeaseExpires Description TcpNumConnections WINSScopeID IPFilterSecurityEnabled DeadGWDetectEnabled TcpMaxConnectRetransmissions ArpAlwaysSourceRoute DHCPEnabled PMTUBHDetectEnabled DNSDomain IPXMediaType KeepAliveInterval PMTUDiscoveryEnabled MTU IPConnectionMetric SettingID ServiceName ForwardBufferMemory FullDNSRegistrationEnabled TcpUseRFC1122UrgentPointer MACAddress ArpUseEtherSNAP DNSEnabledForWINSResolution Caption IPXAddress IGMPLevel NumForwardPackets KeepAliveTime DNSHostName TcpipNetbiosOptions WINSSecondaryServer DefaultTOS IPEnabled IPPortSecurityEnabled DefaultTTL WINSPrimaryServer DHCPServer IPXVirtualNetNumber txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_NetworkAdapterConfiguration_all_000.xml000066400000000000000000000051401305406262000311760ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:9CC6647E-A64A-4C5B-9421-1A2705A47FE9http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:44EE26E6-B260-4158-A62E-CB1D559E20CF[00000000] WAN Miniport (L2TP)WAN Miniport (L2TP)false02falseRasl2tp{52AC0BFD-1FD9-4BDB-9FAA-D2213E7316BA}txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_NetworkAdapterConfiguration_all_001.xml000066400000000000000000000565271305406262000312160ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:5DA7ADFF-A62E-41A6-959A-825E6D592196http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0[00000001] WAN Miniport (SSTP)WAN Miniport (SSTP)false13falseRasSstp{3CA182EF-D8F3-435A-8FB5-901A686B9C97}[00000002] WAN Miniport (IKEv2)WAN Miniport (IKEv2)false24falseRasAgileVpn{42A8CC0B-6BBD-441F-8BE6-007D50050305}[00000003] WAN Miniport (PPTP)WAN Miniport (PPTP)false35falsePptpMiniport{0E95FBA5-B04B-40EB-9186-18AA9226B571}[00000004] WAN Miniport (PPPOE)WAN Miniport (PPPOE)false46falseRasPppoe{4B7922A8-0E7F-4961-854F-78C8E58854D3}[00000005] WAN Miniport (IP)WAN Miniport (IP)false57falseNdisWan{C743C21B-AAB2-40D0-8400-98F2EC0020C5}[00000006] WAN Miniport (IPv6)WAN Miniport (IPv6)false68falseNdisWan{5E2C5CE6-8ED3-49F3-8C0B-F1B1BC2E943E}[00000007] WAN Miniport (Network Monitor)WAN Miniport (Network Monitor)false79falseNdisWan{9DC1652B-36F9-451E-9EB5-234F2CF4620E}[00000008] Microsoft Kernel Debug Network AdapterMicrosoft Kernel Debug Network Adaptertrue810falsekdnic{BF59995A-FAE4-4386-A214-13E08E8777E2}[00000009] RAS Async AdapterRAS Async Adapterfalse911falseAsyncMac{D1418FAF-D1EC-4071-A34B-69582AF7F464}[00000010] Citrix PV Ethernet Adapter%SystemRoot%\System32\drivers\etcCitrix PV Ethernet Adapter #0true2013-04-15T20:58:58Z2013-04-15T19:58:58Z10.30.40.1solutions.locfalseAMAZONA-SDFU7B1falsetrue101210truefalse12:4A:CE:9E:11:23Xennet6{5DF39DBE-C24F-4D98-80CE-E324E17C10FB}2true10.30.1.10[00000011] Microsoft ISATAP AdapterMicrosoft ISATAP Adapterfalse1114falsetunnel{EFE7015D-FCCF-4C72-9ABF-D40C3CFA9118}[00000012] Microsoft Teredo Tunneling AdapterMicrosoft Teredo Tunneling Adapterfalse1213falsetunnel{EE330698-6713-404F-BFBB-E38B95689C22}txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_NetworkAdapterConfiguration_star_000.xml000066400000000000000000000056301305406262000314030ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:9DD83A9E-FD66-4754-BD70-2ACF59BCC004http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:83503201-C870-4DE3-A3B6-A5B1035CF438[00000000] WAN Miniport (L2TP)WAN Miniport (L2TP)false02falseRasl2tp{52AC0BFD-1FD9-4BDB-9FAA-D2213E7316BA}txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_NetworkAdapterConfiguration_star_001.xml000066400000000000000000000671221305406262000314100ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:FC8423A7-AA84-4BB1-A9B6-FCE0A6FE3C70http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0[00000001] WAN Miniport (SSTP)WAN Miniport (SSTP)false13falseRasSstp{3CA182EF-D8F3-435A-8FB5-901A686B9C97}[00000002] WAN Miniport (IKEv2)WAN Miniport (IKEv2)false24falseRasAgileVpn{42A8CC0B-6BBD-441F-8BE6-007D50050305}[00000003] WAN Miniport (PPTP)WAN Miniport (PPTP)false35falsePptpMiniport{0E95FBA5-B04B-40EB-9186-18AA9226B571}[00000004] WAN Miniport (PPPOE)WAN Miniport (PPPOE)false46falseRasPppoe{4B7922A8-0E7F-4961-854F-78C8E58854D3}[00000005] WAN Miniport (IP)WAN Miniport (IP)false57falseNdisWan{C743C21B-AAB2-40D0-8400-98F2EC0020C5}[00000006] WAN Miniport (IPv6)WAN Miniport (IPv6)false68falseNdisWan{5E2C5CE6-8ED3-49F3-8C0B-F1B1BC2E943E}[00000007] WAN Miniport (Network Monitor)WAN Miniport (Network Monitor)false79falseNdisWan{9DC1652B-36F9-451E-9EB5-234F2CF4620E}[00000008] Microsoft Kernel Debug Network AdapterMicrosoft Kernel Debug Network Adaptertrue810falsekdnic{BF59995A-FAE4-4386-A214-13E08E8777E2}[00000009] RAS Async AdapterRAS Async Adapterfalse911falseAsyncMac{D1418FAF-D1EC-4071-A34B-69582AF7F464}[00000010] Citrix PV Ethernet Adapter%SystemRoot%\System32\drivers\etc10.30.40.1Citrix PV Ethernet Adapter #0true2013-04-15T20:58:58Z2013-04-15T19:58:58Z10.30.40.1solutions.locus-east-1.ec2-utilities.amazonaws.comec2.internalcompute-1.internalsolutions.locfalseAMAZONA-SDFU7B110.30.1.10falsetrue0101210.30.40.19310truefalse255.255.255.012:4A:CE:9E:11:23Xennet6{5DF39DBE-C24F-4D98-80CE-E324E17C10FB}2true10.30.1.10[00000011] Microsoft ISATAP AdapterMicrosoft ISATAP Adapterfalse1114falsetunnel{EFE7015D-FCCF-4C72-9ABF-D40C3CFA9118}[00000012] Microsoft Teredo Tunneling AdapterMicrosoft Teredo Tunneling Adapterfalse1213falsetunnel{EE330698-6713-404F-BFBB-E38B95689C22}txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_OperatingSystem.properties000066400000000000000000000020201305406262000270300ustar00rootroot00000000000000WindowsDirectory LastBootUpTime MaxProcessMemorySize MaxNumberOfProcesses NumberOfProcesses DataExecutionPrevention_Available CSName SystemDrive SerialNumber MUILanguages CreationClassName CSCreationClassName Debug SizeStoredInPagingFiles FreeSpaceInPagingFiles ProductType Organization OSType CurrentTimeZone SystemDirectory RegisteredUser Status BuildNumber FreePhysicalMemory CountryCode OSArchitecture ForegroundApplicationBoost PlusProductID PAEEnabled OSLanguage DataExecutionPrevention_Drivers NumberOfUsers NumberOfLicensedUsers DataExecutionPrevention_SupportPolicy TotalSwapSpaceSize Manufacturer BuildType CSDVersion FreeVirtualMemory SuiteMask InstallDate Distributed TotalVirtualMemorySize Caption EncryptionLevel LocalDateTime OtherTypeDescription SystemDevice PortableOperatingSystem OSProductSuite PlusVersionNumber Description OperatingSystemSKU Locale BootDevice Primary ServicePackMajorVersion Version LargeSystemCache CodeSet ServicePackMinorVersion Name DataExecutionPrevention_32BitApplications TotalVisibleMemorySize txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_OperatingSystem_all_000.xml000066400000000000000000000072401305406262000266540ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:CD7F857E-80D0-4BF2-9DC5-96A0C9B80305http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959\Device\HarddiskVolume19200Multiprocessor FreeMicrosoft Windows Server 2012 Standard12521Win32_OperatingSystemWin32_ComputerSystemAMAZONA-SDFU7B10truetruetrue3falsefalse256058472838216483822842013-03-09T02:57:32Z2013-04-15T16:28:43.488171Z2013-04-15T20:28:21.085Z0409Microsoft Corporation42949672958589934464en-USMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition203807Amazon.com64-bit103327218falsetrue3Amazon00184-30000-00001-AA420008388608OK272\Device\HarddiskVolume2C:\Windows\system32C:90179726293646.2.9200C:\Windowstxwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_OperatingSystem_star_000.xml000066400000000000000000000100761305406262000270560ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:724F5735-945C-4AD8-BBFA-5A1E489CA341http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959\Device\HarddiskVolume19200Multiprocessor FreeMicrosoft Windows Server 2012 Standard12521Win32_OperatingSystemWin32_ComputerSystemAMAZONA-SDFU7B10truetruetrue3falsefalse256043588838216483664962013-03-09T02:57:32Z2013-04-15T16:28:43.488171Z2013-04-15T20:28:20.913Z0409Microsoft Corporation42949672958589934464en-USMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition203807Amazon.com64-bit103327218falsetrue3Amazon00184-30000-00001-AA420008388608OK272\Device\HarddiskVolume2C:\Windows\system32C:90179726293646.2.9200C:\Windowstxwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfDisk_PhysicalDisk.properties000066400000000000000000000014301305406262000322750ustar00rootroot00000000000000PercentDiskReadTime_Base DiskBytesPersec Timestamp_Object AvgDisksecPerTransfer_Base AvgDiskBytesPerTransfer Description PercentIdleTime AvgDiskQueueLength Frequency_Sys100NS DiskWriteBytesPersec AvgDiskBytesPerTransfer_Base Timestamp_Sys100NS DiskWritesPersec PercentDiskTime AvgDiskBytesPerWrite AvgDiskBytesPerRead PercentDiskTime_Base AvgDisksecPerRead Timestamp_PerfTime AvgDiskBytesPerWrite_Base Name CurrentDiskQueueLength AvgDisksecPerWrite DiskReadBytesPersec Caption PercentDiskWriteTime Frequency_Object AvgDisksecPerRead_Base Frequency_PerfTime AvgDiskBytesPerRead_Base SplitIOPerSec AvgDiskReadQueueLength PercentDiskWriteTime_Base PercentDiskReadTime DiskReadsPersec AvgDiskWriteQueueLength AvgDisksecPerTransfer PercentIdleTime_Base DiskTransfersPersec AvgDisksecPerWrite_Base txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfDisk_PhysicalDisk_all_000.xml000066400000000000000000000055421305406262000321200ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:01E60895-0D6D-432D-936F-1D823909E40Ahttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:20187108-AAF4-4F93-B4A0-6EA610CA086D12097382467071814942727388605204486818871000006785950004241218750670712494077047388130315625068120850500021814942721209738246707738860520448681062500000100000000 C:6785950001301053131220844518871000001301053131220844512085050001301053131220844515444076000130105313122084451100899312623227130105313122084451txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfDisk_PhysicalDisk_all_001.xml000066400000000000000000000054211305406262000321150ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:68791E79-4AE5-4B8E-B0D2-1A64A628E05Chttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A01209738246707181494272738860520448681887100000678595000424121875067071249407704738813031562506812085050002181494272120973824670773886052044868106250000010000000_Total6785950001301053131220844518871000001301053131220844512085050001301053131220844515444076000130105313122084451100899312623227130105313122084451txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfDisk_PhysicalDisk_star_000.xml000066400000000000000000000063321305406262000323170ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:C4ACE3D7-8C36-4E5A-87FE-9A6F61563125http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:405122B4-5345-4F91-8B7E-E09353B8D73212020940866641801277447312599183366488846880006771340004232087500666412343327047312129721250064820755400041801277441202094086664731259918336648062500000100000000 C:6771340001301053131208364118846880001301053131208364112075540001301053131208364115444076000130105313120836411100899303904758130105313120680421txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfDisk_PhysicalDisk_star_001.xml000066400000000000000000000062111305406262000323140ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:A4179D04-0264-4796-940A-F004A28712F5http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A01202094086664180127744731259918336648884688000677134000423208750066641234332704731212972125006482075540004180127744120209408666473125991833664806250000010000000_Total6771340001301053131208364118846880001301053131208364112075540001301053131208364115444076000130105313120836411100899303904758130105313120680421txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfProc_Process.properties000066400000000000000000000011401305406262000313330ustar00rootroot00000000000000PageFaultsPersec PriorityBase Timestamp_Object PageFileBytes WorkingSetPrivate ThreadCount IDProcess IOOtherBytesPersec Description PercentProcessorTime IOWriteOperationsPersec CreatingProcessID PageFileBytesPeak Frequency_Sys100NS IOReadBytesPersec HandleCount Timestamp_Sys100NS PercentUserTime VirtualBytes WorkingSetPeak IODataBytesPersec Timestamp_PerfTime WorkingSet Name ElapsedTime Caption PercentPrivilegedTime PoolPagedBytes PrivateBytes Frequency_Object VirtualBytesPeak Frequency_PerfTime IOOtherOperationsPersec PoolNonpagedBytes IODataOperationsPersec IOReadOperationsPersec IOWriteBytesPersec txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfProc_Process_all_000.xml000066400000000000000000000045261305406262000311610ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:4AC19153-2B34-4F2B-AC4B-CE4073D4EDC2http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:A9B1D539-0D00-49F5-8F2F-853F46F8C63901301051692773517011000000062500000100000000000000000Idle000137520185534137520185534000001130105313127700515899347695662130105313127700515655366553620480020480txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfProc_Process_all_001.xml000066400000000000000000002236731305406262000311700ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:59F8AC9F-41EE-4ECB-A3C6-D1CBDCD20CFAhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:971F37BC-78F1-4FFD-A20A-34E439D8079A0130105169277351701100000006250000010000000482453513172511556542302494231001104090072401System216421146883018752767524927675249200081146889513010531312770051589934769566213010531312770051534447361694515231129613811712737284130105169277663708100000006250000010000000532764509254620285450604321smss537335872401408936006936006028961236811335872413010531312770051589934769566213010531312770051554394882419916898713699532827852836013010516930933194710000000625000001000000023136820424925242890179720424925200csrss14811380352151961678000514040096240041185613240013138035291301053131277005158993476956621301053131277005154897996849373184291635239526409461764321301051693168199981000000062500000100000008944079508856980626795088500csrss#126271159168127795278000593600615600183361054721311591688130105313127700515899347695662130105313127700515445849605331763235061769842688856064360130105169317131981100000006250000010000000824486656128827436656100wininit9849379841003520936006109200715600186404815213937984413010531312770051589934769566213010531312770051522401024491765763514368351436865536043213010516931760006510000000625000001000000011147614570431418961054145704300winlogon426412410882678784624004780005156001780813971213124108831301053131277005158993476956621301053131277005157003750475214848864665614786560847872448130105169325868149100000006250000010000000265540266408441552429927265296406111235services3729350617650626568268053126360814368028132169306493506176141301053131277005158993476956621301053131277005153454156837126144685260881059842883584448130105169328208034100000006250000010000000831548579651163875937274115732240736538310338914625565lsass332249807364980736223081433697223714664094249289939294980736101301053131277005158993476956621301053131277005154516249645674496114769921147699243335685401301051693422482071000000062500000100000003766368192279283168192200svchost2231285081628508162652017374402410920071388813191282850816101301053131277005158993476956621301053131277005153876864038768640845414484541442314240540130105169351140264100000006250000010000000123668001148960000nvvsvc1549153190416875520312002312002868811429681531904413010531312770051589934769566213010531312770051560878848651059206094848616857612943365401301051693562883021000000062500000100000006568800904420000nvwmi64909929792101990401560011560015568890088929792213010531312770051589934769566213010531312770051545518848467066883653632367411275776054013010516935769229410000000625000001000000010570410793496446081457200107934964nvSCPAPISvr1912123715842789376468003624004156001960069144823715845130105313127700515899347695662130105313127700515432906244713267256115206582272203161654013010516936783237410000000625000001000000032874400112262510000svchost#13041298598429859841170007530732197190321221481671648829859841013010531312770051589934769566213010531312770051530859264353280006057984605798424494085401301051693723564021000000062500000100000003678006395142413551955017713811712141601397121214svchost#24562925696092938241248008021996141951606116608875848925696015130105313127700515899347695662130105313127700515505118726630604811776000122347526201344476130105169374072429100000006250000010000000173824001561500000dwm1211920299776203939849360061092007156001136961710401320299776713010531312770051589934769566213010531312770051510391142410497638433058816330792961973043254013010516937454041810000000625000001000000014508521386056966421849447112599920365940291465691026130svchost#32784597225525762631270413002683353352929493205266115852320263840822552576651301053131277005158993476956621301053131277005151642209281862123523364864038232064185098245401301051693754764621000000062500000100000003748846743311781623586743300svchost#42616450150445015047800051248008468003221601631928450150419130105313127700515899347695662130105313127700515814039048140390472867849125888351846454013010516937906444010000000625000001000000066697226600481675338901803353314864241006311736246690svchost#514547141926401932083212168078219961419828063457431915288141926402013010531312770051589934769566213010531312770051511951800321203830784177766402283110410338304540130105169394508614100000006250000010000000354756327681101262185700327681svchost#6437485934088593408468003936006468003343049447288593408201301053131277005158993476956621301053131277005155716787257798656691814410665984347340854013010516940059267710000000625000001000000032610761784512540592146433202spoolsv254230515203301376109200712480081560011668810983283051520131301053131277005158993476956621301053131277005155025792052006912504627287572481671168540130105169403244662100000006250000010000000260112011474944184154247181128243214019251244svchost#752218749056877363246800393600646800320336151008887490561113010531312770051589934769566213010531312770051563371673663371673690030081185792028631045401301051694057408091000000062500000100000004321156225508156781412832198170712733885Ec2Config160364832460849434624202801371760465148033410403329288483246081713010531312770051589934769566213010531312770051559625881660206694434844672390062081277542454013010516944474090810000000625000001000000038213441048075474341136980185104638501694XenGuestAgent3916614066918458159104166921070615735947448814877385923940408406691842013010531312770051589934769566213010531312770051566119680066225356835307520626155522057011263613010516952976163210000000625000001000000056916042318838411640029080498878131758551458249560287058151WmiPrvSE451032126033921493811212807682126769771613962089526032183192812603392151301053131277005158993476956621301053131277005151025556481103872001917337625624576961331254013010516953444161010000000625000001000000064317201143591306495729897502469svchost#8115274788224047890432187201239000252028013261122442728478822402813010531312770051589934769566213010531312770051517086054417092198444183552452198402745548854013010516953459759010000000625000001000000010517440072862140000svchost#911171036288115507246800346800301060845616810362884130105313127700515899347695662130105313127700515216350722229862414049284263936589824476130105169550197707100000006250000010000000278186857744836944215614471601LogonUI66688380416857292814040091560010156001215683018081383804161013010531312770051589934769566213010531312770051513450035213609779225464832254853127725056636130105169554409707100000006250000010000000535191243515881471823854100658343515881400WmiPrvSE#1253227526071040265748486957644601689490830993726370329441882568260710401513010531312770051589934769566213010531312770051513658521616742809635131392462151682272051266813010516958982199410000000625000001000000016364800416285020000nvxdsync34802420659243868164680036240041560011376015809684206592613010531312770051589934769566213010531312770051588006656943185926160384123002882670592688130105169589978031100000006250000010000000136154800110284100000nvwmi64#124385318668832768000001164817175283186688413010531312770051589934769566213010531312770051592741632969400324476928840499223715845401301051696099461401000000062500000100000001072208001941230000VSSVC1443149913618391041560011560010940876600814991364130105313127700515899347695662130105313127700515405299204212736037109765640192108953613441301051696614265071000000062500000100000001592276583723143824105833828343XenDpriv40051806745618702336156001156001026496258440818067456713010531312770051589934769566213010531312770051555040819255331635215343616157573123141632540130105170735806216100000006250000010000000154284816384127414400163841msdtc2001278118429040643120026240043120021734474256827811841013010531312770051589934769566213010531312770051564315392653803527008256720486422282245401301053120525407491000000062500000100000001111516121612181110012161WmiApSrv12641179648117964800087045633681179648513010531312770051589934769566213010531312770051529306880293191685009408500940810690565401301053121046451361000000062500000100000009228280028761840000msiexec1353569344058122243120023120020761679224856934404130105313127700515899347695662130105313127700515387850244038246452715525320704103219223961301053127674939991000000062500000100000001141260151776180549990790715177618000csrss#2242411919361392640140400901435209231200294881202881311919369130105313127700515899347695662130105313127700515503685125044224087736328847360851968239613010531276905393910000000625000001000000014916887208537861409688833202winlogon#1260614172161507328936006936006089601069201314172165130105313127700515899347695662130105313127700515536862725946572848414721010073695027216881301053130127276681000000062500000100000001562752001561500000dwm#110707697139275898886240047800051560011382422542413697139281301053131277005158993476956621301053131277005151091338241096622083282944033275904509542463613010531304533191010000000625000001000000020121088203282157001872820328200WmiPrvSE#24698476364870860801248008187201262400412016737608476364891301053131277005158993476956621301053131277005154917248049238016845414410797056403456054013010531304751590810000000625000001000000078206000176680000taskhost118811141121114112000748893688811141124130105313127700515899347695662130105313127700515486932484869324818636803252224606208540130105313051728015100000006250000010000000151116655361204624365536100taskhostex1403194560020561924680036240041560011171216824081945600713010531312770051589934769566213010531312770051586523904873840645419008546406412124161720130105313062024010100000006250000010000000201596148712675803684rdpclip13561617920161792015600115600101043216296081617920913010531312770051589934769566213010531312770051585422080854220805464064546406413066241688130105313087764225100000006250000010000000492612006645850000userinit7098232968232966240047800051560016592940408823296313010531312770051589934769566213010531312770051548443392484433922904064290406464716826121301053130885442271000000062500000100000006481464404732129808201549383467125212654explorer12702169533442261811235880234680030109200737120526760131695334440130105313127700515899347695662130105313127700515241508352241508352397762563986227212693504txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfProc_Process_all_002.xml000066400000000000000000000046131305406262000311600ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:9D60766D-3CC9-4EF5-B579-9C91FBF5DDBChttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A00130105313127700515100000006250000010000000127240182529956267079157410216325184010210432914866780425627118412_Total641337737390336042240000013999467339614370172515937070517637615996475960037390336059213010531312770051589934769566213010531312770051563309824006543884288545435648672243712228499456txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfProc_Process_star_000.xml000066400000000000000000000052561305406262000313630ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:B4471CB2-8876-43FF-8F9C-51589EEE5A2Chttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:C5C84DF5-B4F1-4225-819E-0BB9617C964E01301051692773517011000000062500000100000000000000000Idle000137516441510137516441510000001130105313123488592899321300599130105313123488592655366553620480020480txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfProc_Process_star_001.xml000066400000000000000000002254301305406262000313620ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:0C289555-D4C0-4A8E-869B-8FC3618E5CC3http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:7F59EF5E-08E2-414F-8A31-8DBB9D0C7A780130105169277351701100000006250000010000000483453513172511556542302494231001104090072401System216421146883018752767524927675249200081146889513010531312348859289932130059913010531312348859234447361694515231129613811712737284130105169277663708100000006250000010000000532764509254620285450604321smss537335872401408936006936006028961236811335872413010531312348859289932130059913010531312348859254394882419916898713699532827852836013010516930933194710000000625000001000000023136820424925242890179720424925200csrss14811380352151961678000514040096240041185613240013138035291301053131234885928993213005991301053131234885924897996849373184291635239526409461764321301051693168199981000000062500000100000008944079508856980626795088500csrss#126271159168127795278000593600615600183361054721311591688130105313123488592899321300599130105313123488592445849605331763235061769842688856064360130105169317131981100000006250000010000000824486656128827436656100wininit9849379841003520936006109200715600186404815213937984413010531312348859289932130059913010531312348859222401024491765763514368351436865536043213010516931760006510000000625000001000000011147614570431418961054145704300winlogon426412410882678784624004780005156001780813971213124108831301053131234885928993213005991301053131234885927003750475214848864665614786560847872448130105169325868149100000006250000010000000265540266408441552429927265296406111235services3729350617650626568268053126360814368028132169306493506176141301053131234885928993213005991301053131234885923454156837126144685260881059842883584448130105169328208034100000006250000010000000827548579651163875937274115732240736538310338914625565lsass331449479684947968221521423681623614664094249289939294947968101301053131234885928993213005991301053131234885924516249645674496114442241144422443008005401301051693422482071000000062500000100000003766368192279283168192200svchost2231285081628508162652017374402410920071388813191282850816101301053131234885928993213005991301053131234885923876864038768640845414484541442314240540130105169351140264100000006250000010000000123668001148960000nvvsvc1549153190416875520312002312002868811429681531904413010531312348859289932130059913010531312348859260878848651059206094848616857612943365401301051693562883021000000062500000100000006568800904420000nvwmi64909929792101990401560011560015568890088929792213010531312348859289932130059913010531312348859245518848467066883653632367411275776054013010516935769229410000000625000001000000010570410793496446081457200107934964nvSCPAPISvr1912123715842789376468003624004156001960069144823715845130105313123488592899321300599130105313123488592432906244713267256115206582272203161654013010516936783237410000000625000001000000032774400112262510000svchost#13041298598429859841170007530732197190321221481671648829859841013010531312348859289932130059913010531312348859230859264353280006057984605798424494085401301051693723564021000000062500000100000003678006395142413551955017713811712141601397121214svchost#24562925696092938241248008021996141951606116608875848925696015130105313123488592899321300599130105313123488592505118726630604811776000122347526201344476130105169374072429100000006250000010000000173824001561500000dwm1211920299776203939849360061092007156001136961710401320299776713010531312348859289932130059913010531312348859210391142410497638433058816330792961973043254013010516937454041810000000625000001000000014678521385430166417844059112522919739140287465691026130svchost#32784395226795522631270413002683353352929493205266115852320263840822679552651301053131234885928993213005991301053131234885921642209281862123523370598438232064185671685401301051693754764621000000062500000100000003748846743311781623586743300svchost#42616450150445015047800051248008468003221601631928450150419130105313123488592899321300599130105313123488592814039048140390472867849125888351846454013010516937906444010000000625000001000000066697226600481675337895673352614864241006311736246690svchost#514424141230081932083212168078219961419828063456941915288141230082013010531312348859289932130059913010531312348859211951800321203830784177479682283110410309632540130105169394508614100000006250000010000000354756327681101262185700327681svchost#6437485934088593408468003936006468003343049447288593408201301053131234885928993213005991301053131234885925716787257798656691814410665984347340854013010516940059267710000000625000001000000032610761784512540592146433202spoolsv254230515203301376109200712480081560011668810983283051520131301053131234885928993213005991301053131234885925025792052006912504627287572481671168540130105169403244662100000006250000010000000260112011474944184154247181128243214019251244svchost#752218749056877363246800393600646800320336151008887490561113010531312348859289932130059913010531312348859263371673663371673690030081185792028631045401301051694057408091000000062500000100000004321156225508156781412832198170712733885Ec2Config160364832460849434624202801371760465148033410403329288483246081713010531312348859289932130059913010531312348859259625881660206694434844672390062081277542454013010516944474090810000000625000001000000040013441048075474341136980185104638501694XenGuestAgent3916613940761658159104166921070615735947448814877385923940408394076162013010531312348859289932130059913010531312348859266119680066225356835307520626155522057011263613010516952976163210000000625000001000000056916042318838411640029080498878131758551458249560287058151WmiPrvSE451032126033921493811212807682126769771613962089526032183192812603392151301053131234885928993213005991301053131234885921025556481103872001917337625624576961331254013010516953444161010000000625000001000000064317201143591306495729897502469svchost#8115274788224047890432187201239000252028013261122442728478822402813010531312348859289932130059913010531312348859217086054417092198444183552452198402745548854013010516953459759010000000625000001000000010517440072862140000svchost#911171036288115507246800346800301060845616810362884130105313123488592899321300599130105313123488592216350722229862414049284263936589824476130105169550197707100000006250000010000000278186857744836944215614471601LogonUI66688380416857292814040091560010156001215683018081383804161013010531312348859289932130059913010531312348859213450035213609779225464832254853127725056636130105169554409707100000006250000010000000535191243515881471823854100658343515881400WmiPrvSE#1253220326071040265748486957644601689490830993726370329441882568260710401513010531312348859289932130059913010531312348859213658521616742809635131392462151682272051266813010516958982199410000000625000001000000016364800416285020000nvxdsync34802420659243868164680036240041560011376015809684206592613010531312348859289932130059913010531312348859288006656943185926160384123002882670592688130105169589978031100000006250000010000000136154800110284100000nvwmi64#124385318668832768000001164817175283186688413010531312348859289932130059913010531312348859292741632969400324476928840499223715845401301051696099461401000000062500000100000001072208001941230000VSSVC1443149913618391041560011560010940876600814991364130105313123488592899321300599130105313123488592405299204212736037109765640192108953613441301051696614265071000000062500000100000001592276583723143824105833828343XenDpriv40051806745618702336156001156001026496258440818067456713010531312348859289932130059913010531312348859255040819255331635215343616157573123141632540130105170735806216100000006250000010000000154284816384127414400163841msdtc2001278118429040643120026240043120021734474256827811841013010531312348859289932130059913010531312348859264315392653803527008256720486422282245401301053120525407491000000062500000100000001111516121612181110012161WmiApSrv12641179648117964800087045633681179648513010531312348859289932130059913010531312348859229306880293191685009408500940810690565401301053121046451361000000062500000100000009228280028761840000msiexec1353569344058122243120023120020761679224856934404130105313123488592899321300599130105313123488592387850244038246452715525320704103219223961301053127674939991000000062500000100000001121260145868174549746786614586817400csrss#2241912451841392640140400901435209231200293601200881312451849130105313123488592899321300599130105313123488592503644165044224088186888847360897024239613010531276905393910000000625000001000000014916887208537861409688833202winlogon#12606141721615073289360069360060896010692013141721651301053131234885928993213005991301053131234885925368627259465728484147210100736950272txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_PerfProc_Process_star_002.xml000066400000000000000000000412401305406262000313560ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:EBA82169-3712-4D17-A28B-35E310781DCBhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A016881301053130127276681000000062500000100000001572752001561500000dwm#110707701235275898886240047800051560011395222653613701235291301053131234885928993213005991301053131234885921096622081096622083285401633275904512000063613010531304533191010000000625000001000000020121088203282157001872820328200WmiPrvSE#2401846120964808704109200717160116240041176073760846120969130105313123488592899321300599130105313123488592460267524602675282780168372224385843254013010531304751590810000000625000001000000068206000176560000taskhost8219707529707520007104894408970752413010531312348859289932130059913010531312348859246665728466657283645443252224253952540130105313051728015100000006250000010000000151116655361204624365536100taskhostex1403194560020561924680036240041560011171216824081945600713010531312348859289932130059913010531312348859286523904873840645419008546406412124161720130105313062024010100000006250000010000000201596148712675803684rdpclip13561617920161792015600115600101043216296081617920913010531312348859289932130059913010531312348859285422080854220805464064546406413066241688130105313087764225100000006250000010000000492612006645850000userinit7098232968232966240047800051560016592940408823296313010531312348859289932130059913010531312348859248443392484433922904064290406464716826121301053130885442271000000062500000100000006281464404732129808201535383467125212654explorer126341676083222618112343202245240291092007359685191281316760832381301053131234885928993213005991301053131234885922379939842379939843958374439583744125992960130105313123488592100000006250000010000000127240182517780267069157303971325168910209215314865780425627118412_Total641185237227315241994649613999046136914369751313237070517637597586464992037227315259113010531312348859289932130059913010531312348859263228190726535131136543633408669507584227942400txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_Tcpip_NetworkInterface.properties000066400000000000000000000011651305406262000325350ustar00rootroot00000000000000OutputQueueLength Frequency_Sys100NS BytesTotalPersec PacketsReceivedDiscarded PacketsSentUnicastPersec Timestamp_Object PacketsReceivedNonUnicastPersec PacketsPersec Timestamp_Sys100NS PacketsReceivedPersec PacketsOutboundDiscarded Timestamp_PerfTime PacketsReceivedUnknown Name PacketsSentPersec Caption PacketsReceivedUnicastPersec BytesReceivedPersec Frequency_Object Frequency_PerfTime Description PacketsOutboundErrors PacketsReceivedErrors TCPActiveRSCConnections OffloadedConnections BytesSentPersec TCPRSCExceptionsPersec CurrentBandwidth PacketsSentNonUnicastPersec TCPRSCAveragePacketSize TCPRSCCoalescedPacketsPersec txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_Tcpip_NetworkInterface_all_000.xml000066400000000000000000000045371305406262000323560ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:6266199C-9314-4E15-955D-1BB03377F489http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:43CAB98A-0F75-42F3-8563-D0FA37775E5F66201845020945164112100000000006250000010000000Citrix PV Ethernet Adapter _000001215100038833883054058268286300000899082634608130105313085420000txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_Tcpip_NetworkInterface_all_001.xml000066400000000000000000000074341305406262000323560ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:F3446270-C40E-44EA-B51A-331897335916http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A000010000006250000010000000isatap.solutions.loc000000000000000000089908263460813010531308542000000010000006250000010000000Local Area Connection* 110000000000000000000899082634608130105313085420000txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_Tcpip_NetworkInterface_star_000.xml000066400000000000000000000052671305406262000325600ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:21F910A7-B05C-4A9F-A436-42ADAE387489http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:A63FE20D-BCA7-40B7-9173-43417079490E65839244942835152675100000000006250000010000000Citrix PV Ethernet Adapter _000001214200038773877054058265286000000899073600978130105313083860000txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_PerfRawData_Tcpip_NetworkInterface_star_001.xml000066400000000000000000000107141305406262000325520ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:A5F3024A-7448-40A2-B938-61D88894CE43http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A000010000006250000010000000isatap.solutions.loc000000000000000000089907360097813010531308386000000010000006250000010000000Local Area Connection* 110000000000000000000899073600978130105313083860000txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Process.properties000066400000000000000000000012511305406262000253160ustar00rootroot00000000000000MaximumWorkingSetSize MinimumWorkingSetSize ThreadCount KernelModeTime Priority OtherTransferCount VirtualSize CSCreationClassName PrivatePageCount Status ProcessId PeakVirtualSize Handle Description OSCreationClassName HandleCount PeakPageFileUsage QuotaPeakNonPagedPoolUsage CSName WindowsVersion WorkingSetSize WriteOperationCount PageFaults Name InstallDate ParentProcessId QuotaPeakPagedPoolUsage OtherOperationCount CommandLine PeakWorkingSetSize Caption QuotaNonPagedPoolUsage PageFileUsage ReadOperationCount TerminationDate QuotaPagedPoolUsage WriteTransferCount ExecutionState SessionId OSName CreationDate UserModeTime CreationClassName ExecutablePath ReadTransferCount txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Process_all_000.xml000066400000000000000000000051271305406262000251370ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:D70ED4F1-FB81-4A9B-8BC6-D81BC255AAC5http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:67A65653-305B-4CD0-9DF2-4F5614DE68ECSystem Idle ProcessWin32_ProcessWin32_ComputerSystemAMAZONA-SDFU7B1System Idle Process00137511137476System Idle ProcessWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2000000655360000000000010655366.2.92002048000txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Process_all_001.xml000066400000000000000000002236511305406262000251440ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:0B39D33B-6C25-46B9-BA4E-3C011DF6DA78http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:0CBB0441-84F8-49C3-9168-EE18BD61CD0CSystemWin32_Process2013-04-15T16:28:47.73517ZWin32_ComputerSystemAMAZONA-SDFU7B1System448176596491SystemWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition22302556542164211202948169451521348881146884000011049423100095034447366.2.92003112964014090072smss.exe\SystemRoot\System32\smss.exeWin32_Process2013-04-15T16:28:47.76637ZWin32_ComputerSystemAMAZONA-SDFU7B1smss.exe276539360061380200smss.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition228546205373284392241991689721133587227631375044506004054394886.2.9200987136132csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:28:50.933194ZWin32_ComputerSystemAMAZONA-SDFU7B1csrss.exeC:\Windows\system32\csrss.exe3682317800051380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2179742890148113483601484493731843860131380352368121301313325220424909624004489799686.2.9200291635200csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:28:51.681999ZWin32_ComputerSystemAMAZONA-SDFU7B1csrss.exeC:\Windows\system32\csrss.exe440897800051380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2626698026271132432124853317632961213115916844091039117857950818156001445849606.2.9200350617600wininit.exewininit.exeWin32_Process2013-04-15T16:28:51.713198ZWin32_ComputerSystemAMAZONA-SDFU7B1wininit.exeC:\Windows\system32\wininit.exe448829360061380200wininit.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition274328829849163609804917657634321393798444894810961665604156001224010246.2.9200351436800winlogon.exewinlogon.exeWin32_Process2013-04-15T16:28:51.760006ZWin32_ComputerSystemAMAZONA-SDFU7B1winlogon.exeC:\Windows\system32\winlogon.exe4761116240041380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition210541418964264121243226167521484814440131241088476813714145314570413156001700375046.2.9200864665600services.exeC:\Windows\system32\services.exeWin32_Process2013-04-15T16:28:52.586814ZWin32_ComputerSystemAMAZONA-SDFU7B1services.exeC:\Windows\system32\services.exe54026582680531380200services.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition299275524237253408448494437126144791693489792540139118924062652960144368028345415686.2.92006836224351112lsass.exeC:\Windows\system32\lsass.exeWin32_Process2013-04-15T16:28:52.820803ZWin32_ComputerSystemAMAZONA-SDFU7B1lsass.exeC:\Windows\system32\lsass.exe548828221521421380200lsass.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21156969372103314483244848324567449611176949479685482598259838298240661301014664094451624966.2.920011444224255573388138svchost.exeC:\Windows\system32\svchost.exe -k DcomLaunchWin32_Process2013-04-15T16:28:54.22482ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe63637326520171380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition23167928219726245402624387686408120826869766361412915129281920101092007387686406.2.9200831488000nvvsvc.exeC:\Windows\system32\nvvsvc.exeWin32_Process2013-04-15T16:28:55.114026ZWin32_ComputerSystemAMAZONA-SDFU7B1nvvsvc.exeC:\Windows\system32\nvvsvc.exe66812301380200nvvsvc.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2961148154914965401648651059206024815319046689112101120004312002608788486.2.9200609484800nvwmi64.exeC:\Windows\system32\nvwmi64.exeWin32_Process2013-04-15T16:28:55.62883ZWin32_ComputerSystemAMAZONA-SDFU7B1nvwmi64.exeC:\Windows\system32\nvwmi64.exe6886501380200nvwmi64.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition24290490990854099646706688358889297926886877880002156001455188486.2.9200365363200nvSCPAPISvr.exe"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"Win32_Process2013-04-15T16:28:55.769229ZWin32_ComputerSystemAMAZONA-SDFU7B1nvSCPAPISvr.exeC:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe7041054680031380200nvSCPAPISvr.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2145724608191212316540272447132672642882371584704106810750005156001432906246.2.92005611520641079349svchost.exeC:\Windows\system32\svchost.exe -k RPCSSWin32_Process2013-04-15T16:28:56.783237ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe744327115440741380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition22341122630012780540278035328000579282846720744157117750001019032122309125126.2.9200593100800svchost.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedWin32_Process2013-04-15T16:28:57.23564ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\System32\svchost.exe800367124800801380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition217711955045629040540907666306048119488925696080017862211714138117120159516061505118726.2.920011776000121460139712dwm.exe"dwm.exe"Win32_Process2013-04-15T16:28:57.407242ZWin32_ComputerSystemAMAZONA-SDFU7B1dwm.exeC:\Windows\system32\dwm.exe8241739360061380200dwm.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2150156121191982447619916104976384323041320299776824141681416800171560011039114246.2.92003305881600svchost.exeC:\Windows\system32\svchost.exe -k netsvcsWin32_Process2013-04-15T16:28:57.454041ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe852145013001123341380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21124878439312782951224085402569618621235237336822945792852522586325840275919660706520517251521642209286.2.920033390592261224655706svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceWin32_Process2013-04-15T16:28:57.547646ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe8843707800051380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2235811781626054396540439681403904891284501504884221602416033674019468003814039046.2.9200724172800svchost.exeC:\Windows\system32\svchost.exe -k NetworkServiceWin32_Process2013-04-15T16:28:57.906444ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe972666121680781380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition233503367057214240138165401886812038307842229681414758497245188121188100601486228020967206211951800326.2.92001772339266881173284svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkWin32_Process2013-04-15T16:28:59.450861ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe7563544680031380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition218571012624374839254083925779865610416885934087563493359500020468003571678726.2.92006918144132768spoolsv.exeC:\Windows\System32\spoolsv.exeWin32_Process2013-04-15T16:29:00.059267ZWin32_ComputerSystemAMAZONA-SDFU7B1spoolsv.exeC:\Windows\System32\spoolsv.exe107632610920071380200spoolsv.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition259212540254229805403224520069128552830515201076171082011131464013156001502579206.2.920050462722320svchost.exeC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedWin32_Process2013-04-15T16:29:00.324466ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\System32\svchost.exe11202604680031380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition271815424522185445408568633716736115808874905611202014820148140112824320114680036337167366.2.9200900300844192512Ec2Config.exe"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"Win32_Process2013-04-15T16:29:00.57408ZWin32_ComputerSystemAMAZONA-SDFU7B1Ec2Config.exeC:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe115642720280131380200Ec2Config.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition228327814116032461685404827660206694438092847276032115640326453377119817001651480335952020486.2.9200348282888527338XenGuestAgent.exe"C:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe"Win32_Process2013-04-15T16:29:04.47409ZWin32_ComputerSystemAMAZONA-SDFU7B1XenGuestAgent.exeC:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe13443781669210701380200XenGuestAgent.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition29798797431781639157337948540567966622535686114883885875213443838540541501046380194488148776609264646.2.9200351272964169WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:29:12.976163ZWin32_ComputerSystemAMAZONA-SDFU7B1WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe16045691279208201380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition288715229080494504081234863614588110387200250248126443521604261793319858231175829620151394648941025556486.2.920019050496581335601138svchost.exeC:\Windows\System32\svchost.exe -k termsvcsWin32_Process2013-04-15T16:29:13.444161ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\System32\svchost.exe172064318720121380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2729130649511524467605404676817092198444160847882240172026239272395089702820280131708605446.2.9200441712649246svchost.exeC:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestrictedWin32_Process2013-04-15T16:29:13.459759ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe17441054680031380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition221472861117101254011282229862441648103628817441145114500040216350726.2.9200188416000LogonUI.exe"LogonUI.exe" /flags:0x0Win32_Process2013-04-15T16:29:15.01977ZWin32_ComputerSystemAMAZONA-SDFU7B1LogonUI.exeC:\Windows\system32\LogonUI.exe186827814040091380200LogonUI.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2421369466688184476837213609779224888138380416186822295232994756141101560011345003526.2.9200254648321160WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:29:15.44097ZWin32_ComputerSystemAMAZONA-SDFU7B1WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe19125356952964571380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21006273718030402531223254566362595216742809645132826066944191233184372411443515880159932583671365852166.2.92003557376000nvxdsync.exe"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"Win32_Process2013-04-15T16:29:18.982199ZWin32_ComputerSystemAMAZONA-SDFU7B1nvxdsync.exeC:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe6481634680031380200nvxdsync.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition228500416348024196668428494318592120128429670464814155151580016156001880066566.2.9200920780800nvwmi64.exeC:\Windows\system32\nvwmi64.exe -spawnproviderWin32_Process2013-04-15T16:29:18.997803ZWin32_ComputerSystemAMAZONA-SDFU7B1nvwmi64.exeC:\Windows\system32\nvwmi64.exe154813601380200nvwmi64.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2284081102438531126883200969400328208831866881548121681316800140927416326.2.9200665600000VSSVC.exeC:\Windows\system32\vssvc.exeWin32_Process2013-04-15T16:29:20.994614ZWin32_ComputerSystemAMAZONA-SDFU7B1VSSVC.exeC:\Windows\system32\vssvc.exe22081071560011380200VSSVC.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21231941443146454017964212736055088149913622081075107500040405299206.2.9200562380800XenDpriv.exeXenDpriv.exe 1b559c34cf7c1003ad88f4001a1c7649Win32_Process2013-04-15T16:29:26.14265ZWin32_ComputerSystemAMAZONA-SDFU7B1XenDpriv.exeC:\Program Files (x86)\Citrix\XenTools\XenDpriv.exe22761591560011380200XenDpriv.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition24104382400517644134418264553316352153888180674562276262532825328583380705504081926.2.920015343616334msdtc.exeC:\Windows\System32\msdtc.exeWin32_Process2013-04-15T16:31:13.580621ZWin32_ComputerSystemAMAZONA-SDFU7B1msdtc.exeC:\Windows\System32\msdtc.exe28481543120021380200msdtc.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21442742001271654028366538035270368278118428481773187300010312002643153926.2.92007008256116384WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exeWin32_Process2013-04-15T20:26:45.254074ZWin32_ComputerSystemAMAZONA-SDFU7B1WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe151611101380200WmiApSrv.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition211121812641152540115229319168489281179648151695695600050293068806.2.9200500940811216msiexec.exeC:\Windows\system32\msiexec.exe /VWin32_Process2013-04-15T20:26:50.464513ZWin32_ComputerSystemAMAZONA-SDFU7B1msiexec.exeC:\Windows\system32\msiexec.exe2828923120021380200msiexec.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2184287613535560540567640382464519685693440282887898200040387850246.2.9200527155200csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T20:27:56.749399ZWin32_ComputerSystemAMAZONA-SDFU7B1csrss.exeC:\Windows\system32\csrss.exe1260109140400901380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2774354901423941236239613605044224086401312656641260101191011915612814429312002504299526.2.9200883507200txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Process_all_002.xml000066400000000000000000000451011305406262000251350ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:13AA7E5C-F806-4315-A978-F18091F4AC32http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0winlogon.exewinlogon.exeWin32_Process2013-04-15T20:27:56.905393ZWin32_ComputerSystemAMAZONA-SDFU7B1winlogon.exeC:\Windows\system32\winlogon.exe16881499360061380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2140937862606138423961472594657289864131417216168891051311736888250536862726.2.920048414722320dwm.exe"dwm.exe"Win32_Process2013-04-15T20:28:21.272766ZWin32_ComputerSystemAMAZONA-SDFU7B1dwm.exeC:\Windows\system32\dwm.exe27521536240041380200dwm.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition215015610689684416887412105906176324961370082562752142141821400291560011059020806.2.92003278028800WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T20:28:24.533191ZWin32_ComputerSystemAMAZONA-SDFU7B1WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe21081939360061380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21837963835534268636434044589056781284370432210811701376282032808624004428318726.2.9200774553600taskhost.exetaskhost.exe USERWin32_Process2013-04-15T20:28:24.75159ZWin32_ComputerSystemAMAZONA-SDFU7B1taskhost.exeC:\Windows\system32\taskhost.exe20606801380200taskhost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2561768169485409484666572831768970752206078878800240466657286.2.9200260505600TSTheme.exeC:\Windows\system32\TSTheme.exe -EmbeddingWin32_Process2013-04-15T20:28:24.923188ZWin32_ComputerSystemAMAZONA-SDFU7B1TSTheme.exeC:\Windows\system32\TSTheme.exe24369901380200TSTheme.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2664701128120463612687494041644728123289624369142914336654250738754566.2.9200455475200taskhostex.exetaskhostex.exe Win32_Process2013-04-15T20:28:25.172801ZWin32_ComputerSystemAMAZONA-SDFU7B1taskhostex.exeC:\Windows\system32\taskhostex.exe1161464680031380200taskhostex.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2222204613821844540200887384064533681888256116121651416616553626156001859914246.2.9200533299200rdpclip.exerdpclipWin32_Process2013-04-15T20:28:26.202401ZWin32_ComputerSystemAMAZONA-SDFU7B1rdpclip.exeC:\Windows\System32\rdpclip.exe5962011560011380200rdpclip.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2751261356158017201580854220805336816179205961116011160380290854220806.2.92005464064468userinit.exeC:\Windows\system32\userinit.exeWin32_Process2013-04-15T20:28:28.776422ZWin32_ComputerSystemAMAZONA-SDFU7B1userinit.exeC:\Windows\system32\userinit.exe2612486240041380200userinit.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition25856647098041688804484433922836882329626127927930023156001484433926.2.9200290406400explorer.exeC:\Windows\Explorer.EXEWin32_Process2013-04-15T20:28:28.854422ZWin32_ComputerSystemAMAZONA-SDFU7B1explorer.exeC:\Windows\Explorer.EXE146446923400151380200explorer.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition29091393610417136202612220882016665603714413139468801464274092740956902762247800052016665606.2.920031633408421265txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Process_star_000.xml000066400000000000000000000055551305406262000253450ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:B2A7E370-83A3-4AA6-9762-A5D50027FAF4http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:92A308CD-D945-48E9-92F1-E81967952B61System Idle ProcessWin32_ProcessWin32_ComputerSystemAMAZONA-SDFU7B1System Idle Process00137507861455System Idle ProcessWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2000000655360000000000010655366.2.92002048000txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Process_star_001.xml000066400000000000000000002257301305406262000253450ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:B716EB7C-9D9A-4B6A-8C57-A918283B5FAFhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:13276C2F-5658-4CA8-96A2-EA3204983BE4SystemWin32_Process2013-04-15T16:28:47.73517ZWin32_ComputerSystemAMAZONA-SDFU7B1System447876596491SystemWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition22302556542164211202948169451521348881146884000011049423100095034447366.2.92003112964014090072smss.exe\SystemRoot\System32\smss.exeWin32_Process2013-04-15T16:28:47.76637ZWin32_ComputerSystemAMAZONA-SDFU7B1smss.exe276539360061380200smss.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition228546205373284392241991689721133587227631375044506004054394886.2.9200987136132csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:28:50.933194ZWin32_ComputerSystemAMAZONA-SDFU7B1csrss.exeC:\Windows\system32\csrss.exe3682317800051380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2179742890148113483601484493731843860131380352368121301313325220424909624004489799686.2.9200291635200csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T16:28:51.681999ZWin32_ComputerSystemAMAZONA-SDFU7B1csrss.exeC:\Windows\system32\csrss.exe440897800051380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2626698026271132432124853317632961213115916844091039117857950818156001445849606.2.9200350617600wininit.exewininit.exeWin32_Process2013-04-15T16:28:51.713198ZWin32_ComputerSystemAMAZONA-SDFU7B1wininit.exeC:\Windows\system32\wininit.exe448829360061380200wininit.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition274328829849163609804917657634321393798444894810961665604156001224010246.2.9200351436800winlogon.exewinlogon.exeWin32_Process2013-04-15T16:28:51.760006ZWin32_ComputerSystemAMAZONA-SDFU7B1winlogon.exeC:\Windows\system32\winlogon.exe4761116240041380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition210541418964264121243226167521484814440131241088476813714145314570413156001700375046.2.9200864665600services.exeC:\Windows\system32\services.exeWin32_Process2013-04-15T16:28:52.586814ZWin32_ComputerSystemAMAZONA-SDFU7B1services.exeC:\Windows\system32\services.exe54026482680531380200services.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition299275524237253408448494437126144791693489792540139118924062652960144368028345415686.2.92006836224351112lsass.exeC:\Windows\system32\lsass.exeWin32_Process2013-04-15T16:28:52.820803ZWin32_ComputerSystemAMAZONA-SDFU7B1lsass.exeC:\Windows\system32\lsass.exe548827221521421380200lsass.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21156969372103313483244848324567449611172949479685482598259838298240661301014664094451624966.2.920011440128255573388138svchost.exeC:\Windows\system32\svchost.exe -k DcomLaunchWin32_Process2013-04-15T16:28:54.22482ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe63637226520171380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition23167928219526245402624387686408112826869766361412915129281920101092007387686406.2.9200830668800nvvsvc.exeC:\Windows\system32\nvvsvc.exeWin32_Process2013-04-15T16:28:55.114026ZWin32_ComputerSystemAMAZONA-SDFU7B1nvvsvc.exeC:\Windows\system32\nvvsvc.exe66812301380200nvvsvc.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2961148154914965401648651059206024815319046689112101120004312002608788486.2.9200609484800nvwmi64.exeC:\Windows\system32\nvwmi64.exeWin32_Process2013-04-15T16:28:55.62883ZWin32_ComputerSystemAMAZONA-SDFU7B1nvwmi64.exeC:\Windows\system32\nvwmi64.exe6886501380200nvwmi64.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition24290490990854099646706688358889297926886877880002156001455188486.2.9200365363200nvSCPAPISvr.exe"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"Win32_Process2013-04-15T16:28:55.769229ZWin32_ComputerSystemAMAZONA-SDFU7B1nvSCPAPISvr.exeC:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe7041054680031380200nvSCPAPISvr.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2145724608191212316540272447132672642882371584704106810750005156001432906246.2.92005611520641079349svchost.exeC:\Windows\system32\svchost.exe -k RPCSSWin32_Process2013-04-15T16:28:56.783237ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe744322115440741380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition22331122629972772540278035328000578082838528744157017750001019032122308592646.2.9200591462400svchost.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedWin32_Process2013-04-15T16:28:57.23564ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\System32\svchost.exe800367124800801380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition217711955045629040540907666306048119488925696080017862211714138117120159516061505118726.2.920011776000121460139712dwm.exe"dwm.exe"Win32_Process2013-04-15T16:28:57.407242ZWin32_ComputerSystemAMAZONA-SDFU7B1dwm.exeC:\Windows\system32\dwm.exe8241739360061380200dwm.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2150156121191982447619916104976384323041320299776824141681416800171560011039114246.2.92003305881600svchost.exeC:\Windows\system32\svchost.exe -k netsvcsWin32_Process2013-04-15T16:28:57.454041ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe852144913001123341380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21124768438992782915216165402569618621235237336822134784852522586325840271919627106520517251521642209286.2.920033382400261194653982svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceWin32_Process2013-04-15T16:28:57.547646ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe8843667800051380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2234911768625974368540436873719808891284472832884221442414933674019468003730152966.2.9200720896000svchost.exeC:\Windows\system32\svchost.exe -k NetworkServiceWin32_Process2013-04-15T16:28:57.906444ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe972666121680781380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition233496355533614148142645401886812038307842229681460633697245188121188100601486228020967206211951800326.2.92001771110466881173284svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkWin32_Process2013-04-15T16:28:59.450861ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe7563544680031380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition218571012624374839254083925779865610416885934087563493359500020468003571678726.2.92006918144132768spoolsv.exeC:\Windows\System32\spoolsv.exeWin32_Process2013-04-15T16:29:00.059267ZWin32_ComputerSystemAMAZONA-SDFU7B1spoolsv.exeC:\Windows\System32\spoolsv.exe107632610920071380200spoolsv.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition259212540254229805403224520069128552830515201076171082011131464013156001502579206.2.920050462722320svchost.exeC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedWin32_Process2013-04-15T16:29:00.324466ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\System32\svchost.exe11202604680031380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition271815424522185445408568633716736115808874905611202014820148140112824320114680036337167366.2.9200900300844192512Ec2Config.exe"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"Win32_Process2013-04-15T16:29:00.57408ZWin32_ComputerSystemAMAZONA-SDFU7B1Ec2Config.exeC:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe115642720280131380200Ec2Config.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition228327814116032461685404827660206694438092847276032115640326453377119817001651480335952020486.2.9200348282888527338XenGuestAgent.exe"C:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe"Win32_Process2013-04-15T16:29:04.47409ZWin32_ComputerSystemAMAZONA-SDFU7B1XenGuestAgent.exeC:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe13443781669210701380200XenGuestAgent.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition29798797431781639157337948540567966622535686114883885875213443838540541501046380194488148776609264646.2.9200351272964169WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:29:12.976163ZWin32_ComputerSystemAMAZONA-SDFU7B1WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe16045691277648191380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition288651129075014498581261663614588110387200250248129187841604261793319858231175829620151394648941025228806.2.920019275776581335601138svchost.exeC:\Windows\System32\svchost.exe -k termsvcsWin32_Process2013-04-15T16:29:13.444161ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\System32\svchost.exe172064218720121380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2729130649511524467605404676817092198444160847882240172026239272395089702820280131708605446.2.9200441712649246svchost.exeC:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestrictedWin32_Process2013-04-15T16:29:13.459759ZWin32_ComputerSystemAMAZONA-SDFU7B1svchost.exeC:\Windows\system32\svchost.exe17441054680031380200svchost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition221472861117101254011282229862441648103628817441145114500040216350726.2.9200188416000LogonUI.exe"LogonUI.exe" /flags:0x0Win32_Process2013-04-15T16:29:15.01977ZWin32_ComputerSystemAMAZONA-SDFU7B1LogonUI.exeC:\Windows\system32\LogonUI.exe186827814040091380200LogonUI.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2421369466688184476837213609779224888138380416186822295232994756141101560011345003526.2.9200254648321160WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T16:29:15.44097ZWin32_ComputerSystemAMAZONA-SDFU7B1WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe19125356952964571380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21006273718030402531223254566362595216742809645132826066944191233184372411443515880159932583671365852166.2.92003557376000nvxdsync.exe"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"Win32_Process2013-04-15T16:29:18.982199ZWin32_ComputerSystemAMAZONA-SDFU7B1nvxdsync.exeC:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe6481634680031380200nvxdsync.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition228498416348024196668428494318592120128429670464814155151580016156001880066566.2.9200920780800nvwmi64.exeC:\Windows\system32\nvwmi64.exe -spawnproviderWin32_Process2013-04-15T16:29:18.997803ZWin32_ComputerSystemAMAZONA-SDFU7B1nvwmi64.exeC:\Windows\system32\nvwmi64.exe154813601380200nvwmi64.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2284081102438531126883200969400328208831866881548121681316800140927416326.2.9200665600000VSSVC.exeC:\Windows\system32\vssvc.exeWin32_Process2013-04-15T16:29:20.994614ZWin32_ComputerSystemAMAZONA-SDFU7B1VSSVC.exeC:\Windows\system32\vssvc.exe22081071560011380200VSSVC.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21231941443146454017964212736055088149913622081075107500040405299206.2.9200562380800XenDpriv.exeXenDpriv.exe 1b559c34cf7c1003ad88f4001a1c7649Win32_Process2013-04-15T16:29:26.14265ZWin32_ComputerSystemAMAZONA-SDFU7B1XenDpriv.exeC:\Program Files (x86)\Citrix\XenTools\XenDpriv.exe22761591560011380200XenDpriv.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition24104382400517644134418264553316352153888180674562276262532825328583380705504081926.2.920015343616334txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Process_star_002.xml000066400000000000000000000750141305406262000253440ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:12F312ED-FB16-465D-B3EB-8C7FCB04C386http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0msdtc.exeC:\Windows\System32\msdtc.exeWin32_Process2013-04-15T16:31:13.580621ZWin32_ComputerSystemAMAZONA-SDFU7B1msdtc.exeC:\Windows\System32\msdtc.exe28481543120021380200msdtc.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21442742001271654028366538035270368278118428481773187300010312002643153926.2.92007008256116384WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exeWin32_Process2013-04-15T20:26:45.254074ZWin32_ComputerSystemAMAZONA-SDFU7B1WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe151611101380200WmiApSrv.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition211121812641152540115229319168489281179648151695695600050293068806.2.9200500940811216msiexec.exeC:\Windows\system32\msiexec.exe /VWin32_Process2013-04-15T20:26:50.464513ZWin32_ComputerSystemAMAZONA-SDFU7B1msiexec.exeC:\Windows\system32\msiexec.exe2828923120021380200msiexec.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2184287613535560540567640382464519685693440282887898200040387850246.2.9200527155200csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16Win32_Process2013-04-15T20:27:56.749399ZWin32_ComputerSystemAMAZONA-SDFU7B1csrss.exeC:\Windows\system32\csrss.exe1260105138840891380200csrss.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2766154852623831228239613605042995286241312574721260101191011914411632829312002504299526.2.9200883097600winlogon.exewinlogon.exeWin32_Process2013-04-15T20:27:56.905393ZWin32_ComputerSystemAMAZONA-SDFU7B1winlogon.exeC:\Windows\system32\winlogon.exe16881499360061380200winlogon.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2140937862606138423961472594657289864131417216168891051311736888250536862726.2.920048414722320dwm.exe"dwm.exe"Win32_Process2013-04-15T20:28:21.272766ZWin32_ComputerSystemAMAZONA-SDFU7B1dwm.exeC:\Windows\system32\dwm.exe27521536240041380200dwm.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition215015610533702816887028105906176319921371966722752142021820200291560011059061766.2.92003275980800WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exeWin32_Process2013-04-15T20:28:24.533191ZWin32_ComputerSystemAMAZONA-SDFU7B1WmiPrvSE.exeC:\Windows\system32\wbem\wmiprvse.exe21081939360061380200WmiPrvSE.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition21837963835534268636434044589056781284370432210811701376282032808624004428318726.2.9200774553600taskhost.exetaskhost.exe USERWin32_Process2013-04-15T20:28:24.75159ZWin32_ComputerSystemAMAZONA-SDFU7B1taskhost.exeC:\Windows\system32\taskhost.exe20606801380200taskhost.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2561768059485409484666572831768970752206078878800240466657286.2.9200256000000TSTheme.exeC:\Windows\system32\TSTheme.exe -EmbeddingWin32_Process2013-04-15T20:28:24.923188ZWin32_ComputerSystemAMAZONA-SDFU7B1TSTheme.exeC:\Windows\system32\TSTheme.exe243610001380200TSTheme.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2664701124123263612687494041644728126156824369142914336654260744079366.2.9200455475200taskhostex.exetaskhostex.exe Win32_Process2013-04-15T20:28:25.172801ZWin32_ComputerSystemAMAZONA-SDFU7B1taskhostex.exeC:\Windows\system32\taskhostex.exe1161464680031380200taskhostex.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2222204613821844540200887384064533681888256116121651416616553626156001859914246.2.9200533299200rdpclip.exerdpclipWin32_Process2013-04-15T20:28:26.202401ZWin32_ComputerSystemAMAZONA-SDFU7B1rdpclip.exeC:\Windows\System32\rdpclip.exe5962011560011380200rdpclip.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2751261356158017201580854220805336816179205961116011160380290854220806.2.92005464064468userinit.exeC:\Windows\system32\userinit.exeWin32_Process2013-04-15T20:28:28.776422ZWin32_ComputerSystemAMAZONA-SDFU7B1userinit.exeC:\Windows\system32\userinit.exe2612486240041380200userinit.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition25856647098041688804484433922836882329626127927930023156001484433926.2.9200290406400explorer.exeC:\Windows\Explorer.EXEWin32_Process2013-04-15T20:28:28.854422ZWin32_ComputerSystemAMAZONA-SDFU7B1explorer.exeC:\Windows\Explorer.EXE146433915600101380200explorer.exeWin32_OperatingSystemMicrosoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2760105826571112802612112801578188802589613115507201464212932129342891212163120021578188806.2.92002651750400txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Processor.properties000066400000000000000000000013161305406262000256610ustar00rootroot00000000000000L2CacheSize VMMonitorModeExtensions ConfigManagerErrorCode VoltageCaps PowerManagementSupported LoadPercentage Version Role CpuStatus SecondLevelAddressTranslationExtensions Revision Status PNPDeviceID L2CacheSpeed AddressWidth ConfigManagerUserConfig ErrorCleared ProcessorId ProcessorType DeviceID CurrentVoltage CurrentClockSpeed Manufacturer Name InstallDate Level SocketDesignation NumberOfCores Caption StatusInfo Architecture UniqueId CreationClassName OtherFamilyDescription Description NumberOfLogicalProcessors Family ErrorDescription UpgradeMethod SystemName LastErrorCode ExtClock Stepping VirtualizationFirmwareEnabled MaxClockSpeed L3CacheSize L3CacheSpeed Availability SystemCreationClassName DataWidth txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Processor_all_000.xml000066400000000000000000000052311305406262000254740ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:1F1FF479-36A9-467F-88ED-FA4E5D264560http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039596493Intel64 Family 6 Model 44 Stepping 21Win32_Processor211364Intel64 Family 6 Model 44 Stepping 2CPU0100617GenuineIntel2113Intel(R) Xeon(R) CPU E5645 @ 2.40GHz11false1789FBFF000206C2311266CPUfalseCPU 1OK3Win32_ComputerSystemAMAZONA-SDFU7B11falsefalse0txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Processor_star_000.xml000066400000000000000000000057011305406262000256770ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:41E7E5BB-E6C5-4550-BA70-7850C1DE546Ahttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C4780039596493Intel64 Family 6 Model 44 Stepping 21Win32_Processor211364Intel64 Family 6 Model 44 Stepping 2CPU0100619GenuineIntel2113Intel(R) Xeon(R) CPU E5645 @ 2.40GHz11false1789FBFF000206C2311266CPUfalseCPU 1OK3Win32_ComputerSystemAMAZONA-SDFU7B11falsefalse0txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Product.properties000066400000000000000000000004671305406262000253300ustar00rootroot00000000000000InstallState SKUNumber IdentifyingNumber URLUpdateInfo PackageName WordCount InstallSource Version InstallDate2 URLInfoAbout LocalPackage Vendor HelpTelephone PackageCode RegOwner PackageCache Name Language Caption AssignmentType RegCompany HelpLink Description InstallLocation Transforms InstallDate ProductID txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Product_all_000.xml000066400000000000000000000035571305406262000251460ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:004493E4-F42F-435D-86D0-C42E6D359E31http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:B95E93EC-F530-47A3-90D7-1A16CB7E0D4E1aws-cfn-bootstrapaws-cfn-bootstrap{845BA2A8-37E4-411E-83F2-66BE821EAAD7}20130111C:\51033C:\Windows\Installer\31a409.msiaws-cfn-bootstrapC:\Windows\Installer\31a409.msi{0CF9706D-7980-4E8B-820E-66FF034E095E}aws-cfn-bootstrap-win64-backport-msi-scope-b4.msiAmazon Web Services1.3.82txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Product_all_001.xml000066400000000000000000000060171305406262000251410ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:98A558C1-DD67-4BC3-9E50-264D26705034http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A01Ec2ConfigServiceEc2ConfigService{39B873AE-B454-4E8B-B25B-6AFD700BDF06}20130222C:\Users\ADMINI~1\AppData\Local\Temp\2\7ZipSfx.000\51033C:\Windows\Installer\f62d41.msiEc2ConfigServiceC:\Windows\Installer\f62d41.msi{ED53B0CD-776E-4749-88F9-6397669BCF80}Ec2ConfigSetup_x64.msiec2.amazonaws.comAmazon2.1.1321AWS Tools for WindowsAWS Tools for Windowshttp://developer.amazonwebservices.com/connect/support.jspa{BC1B758F-F49D-4F1B-A69F-37497523EDCA}20130222C:\51033C:\Windows\Installer\f62d5c.msiAWS Tools for WindowsC:\Windows\Installer\f62d5c.msi{FE501EF5-99DB-4DB6-9373-EB2D8D7F60EA}AWSToolsAndSDKForNet.msihttp://aws.amazon.com/sdkfornet/Amazon Web Services Developer Relations2.9.388.02txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Product_star_000.xml000066400000000000000000000040711305406262000253370ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:28BB8ABE-88DE-45A3-BEBF-C807F3561130http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:4E76C435-1731-425F-AF47-4DC0D2D20CC31aws-cfn-bootstrapaws-cfn-bootstrap{845BA2A8-37E4-411E-83F2-66BE821EAAD7}20130111C:\51033C:\Windows\Installer\31a409.msiaws-cfn-bootstrapC:\Windows\Installer\31a409.msi{0CF9706D-7980-4E8B-820E-66FF034E095E}aws-cfn-bootstrap-win64-backport-msi-scope-b4.msiAmazon Web Services1.3.82txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Product_star_001.xml000066400000000000000000000066511305406262000253460ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:D1D19615-714D-4D9D-9935-C8907730261Ehttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A01Ec2ConfigServiceEc2ConfigService{39B873AE-B454-4E8B-B25B-6AFD700BDF06}20130222C:\Users\ADMINI~1\AppData\Local\Temp\2\7ZipSfx.000\51033C:\Windows\Installer\f62d41.msiEc2ConfigServiceC:\Windows\Installer\f62d41.msi{ED53B0CD-776E-4749-88F9-6397669BCF80}Ec2ConfigSetup_x64.msiec2.amazonaws.comAmazon2.1.1321AWS Tools for WindowsAWS Tools for Windowshttp://developer.amazonwebservices.com/connect/support.jspa{BC1B758F-F49D-4F1B-A69F-37497523EDCA}20130222C:\51033C:\Windows\Installer\f62d5c.msiAWS Tools for WindowsC:\Windows\Installer\f62d5c.msi{FE501EF5-99DB-4DB6-9373-EB2D8D7F60EA}AWSToolsAndSDKForNet.msihttp://aws.amazon.com/sdkfornet/Amazon Web Services Developer Relations2.9.388.02txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Service.properties000066400000000000000000000004351305406262000253030ustar00rootroot00000000000000DisplayName ServiceSpecificExitCode State SystemName ErrorControl Status ProcessId Description Started AcceptStop CheckPoint PathName WaitHint Name InstallDate Caption StartMode DesktopInteract ServiceType TagId StartName AcceptPause CreationClassName SystemCreationClassName ExitCode txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Service_all_000.xml000066400000000000000000000034721305406262000251220ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:4F7A07F6-4020-474A-8336-4A23A8204BE8http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:24D6AF3D-00C4-4148-9C07-336C5B7DCACEfalsefalseApplication Experience0Win32_ServiceProcesses application compatibility cache requests for applications as they are launchedfalseApplication ExperienceNormal1077AeLookupSvcC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Service_all_001.xml000066400000000000000000002237611305406262000251300ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:9390E8FF-259B-440B-A209-BD048823859Bhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:579104E4-0526-4E72-B6CB-D3EF156F2804falsefalseApplication Layer Gateway Service0Win32_ServiceProvides support for 3rd party protocol plug-ins for Internet Connection SharingfalseApplication Layer Gateway ServiceNormal1077ALGC:\Windows\System32\alg.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows All-User Install Agent0Win32_ServiceInstall AppX Packages for all authorized usersfalseWindows All-User Install AgentNormal1077AllUserInstallAgentC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseApplication Identity0Win32_ServiceDetermines and verifies the identity of an application. Disabling this service will prevent AppLocker from being enforced.falseApplication IdentityNormal1077AppIDSvcC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted00Share ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseApplication Information0Win32_ServiceFacilitates the running of interactive applications with additional administrative privileges. If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.falseApplication InformationNormal1077AppinfoC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseApplication Management0Win32_ServiceProcesses installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.falseApplication ManagementNormal1077AppMgmtC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Audio Endpoint Builder0Win32_ServiceManages audio devices for the Windows Audio service. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to startfalseWindows Audio Endpoint BuilderNormal1077AudioEndpointBuilderC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Audio0Win32_ServiceManages audio for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to startfalseWindows AudioNormal1077AudiosrvC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueBase Filtering Engine0Win32_ServiceThe Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.falseBase Filtering EngineNormal0BFEC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork7560Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseBackground Intelligent Transfer Service0Win32_ServiceTransfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.falseBackground Intelligent Transfer ServiceNormal1077BITSC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseBackground Tasks Infrastructure Service0Win32_ServiceWindows infrastructure service that controls which background tasks can run on the system.falseBackground Tasks Infrastructure ServiceNormal0BrokerInfrastructureC:\Windows\system32\svchost.exe -k DcomLaunch6360Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseComputer Browser0Win32_ServiceMaintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.falseComputer BrowserNormal1077BrowserC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueCertificate Propagation0Win32_ServiceCopies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver.falseCertificate PropagationNormal0CertPropSvcC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseCloudFormation cfn-hup0Win32_ServiceCloudFormation cfn-hup for WindowsfalseCloudFormation cfn-hupIgnore1077cfn-hup"C:\Program Files\Amazon\cfn-bootstrap\winhup.exe"00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseCOM+ System Application0Win32_ServiceManages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ System ApplicationNormal1077COMSysAppC:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueCryptographic Services0Win32_ServiceProvides three management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCryptographic ServicesNormal0CryptSvcC:\Windows\system32\svchost.exe -k NetworkService9720Share ProcesstrueAutoNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDCOM Server Process Launcher0Win32_ServiceThe DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running.falseDCOM Server Process LauncherNormal0DcomLaunchC:\Windows\system32\svchost.exe -k DcomLaunch6360Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseOptimize drives0Win32_ServiceHelps the computer run more efficiently by optimizing files on storage drives.falseOptimize drivesNormal1077defragsvcC:\Windows\system32\svchost.exe -k defragsvc00Own ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDevice Association Service0Win32_ServiceEnables pairing between the system and wired or wireless devices.falseDevice Association ServiceNormal1077DeviceAssociationServiceC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDevice Install Service0Win32_ServiceEnables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.falseDevice Install ServiceNormal0DeviceInstallC:\Windows\system32\svchost.exe -k DcomLaunch00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueDHCP Client0Win32_ServiceRegisters and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.falseDHCP ClientNormal0DhcpC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted8000Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueDNS Client0Win32_ServiceThe DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computer's name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start.falseDNS ClientNormal0DnscacheC:\Windows\system32\svchost.exe -k NetworkService9720Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWired AutoConfig0Win32_ServiceThe Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service.falseWired AutoConfigNormal1077dot3svcC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueDiagnostic Policy Service0Win32_ServiceThe Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components. If this service is stopped, diagnostics will no longer function.falseDiagnostic Policy ServiceNormal0DPSC:\Windows\System32\svchost.exe -k LocalServiceNoNetwork7560Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDevice Setup Manager0Win32_ServiceEnables the detection, download and installation of device-related software. If this service is disabled, devices may be configured with outdated software, and may not work correctly.falseDevice Setup ManagerNormal1077DsmSvcC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseExtensible Authentication Protocol0Win32_ServiceThe Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP). EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process. If you disable this service, this computer is prevented from accessing networks that require EAP authentication.falseExtensible Authentication ProtocolNormal1077EaphostC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueEc2Config0Win32_ServiceEc2 Configuration ServicefalseEc2ConfigNormal0Ec2Config"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"11560Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseEncrypting File System (EFS)0Win32_ServiceProvides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.falseEncrypting File System (EFS)Normal1077EFSC:\Windows\System32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWindows Event Log0Win32_ServiceThis service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.falseWindows Event LogNormal0EventLogC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted8000Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueCOM+ Event System0Win32_ServiceSupports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ Event SystemNormal0EventSystemC:\Windows\system32\svchost.exe -k LocalService8840Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseFunction Discovery Provider Host0Win32_ServiceThe FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services – Discovery (WS-D) protocol. Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources.falseFunction Discovery Provider HostNormal1077fdPHostC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseFunction Discovery Resource Publication0Win32_ServicePublishes this computer and resources attached to this computer so they can be discovered over the network. If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.falseFunction Discovery Resource PublicationNormal1077FDResPubC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWindows Font Cache Service0Win32_ServiceOptimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance.falseWindows Font Cache ServiceNormal0FontCacheC:\Windows\system32\svchost.exe -k LocalService8840Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Presentation Foundation Font Cache 3.0.0.00Win32_ServiceOptimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.falseWindows Presentation Foundation Font Cache 3.0.0.0Normal1077FontCache3.0.0.0C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe00Own ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueGroup Policy Client0Win32_ServiceThe service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is disabled.falseGroup Policy ClientNormal0gpsvcC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHuman Interface Device Access0Win32_ServiceEnables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.falseHuman Interface Device AccessNormal1077hidservC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHealth Key and Certificate Management0Win32_ServiceProvides X.509 certificate and key management services for the Network Access Protection Agent (NAPAgent). Enforcement technologies that use X.509 certificates may not function properly without this servicefalseHealth Key and Certificate ManagementNormal1077hkmsvcC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueIKE and AuthIP IPsec Keying Modules0Win32_ServiceThe IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.falseIKE and AuthIP IPsec Keying ModulesNormal0IKEEXTC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueIP Helper0Win32_ServiceProvides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.falseIP HelperNormal0iphlpsvcC:\Windows\System32\svchost.exe -k NetSvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseCNG Key Isolation0Win32_ServiceThe CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.falseCNG Key IsolationNormal1077KeyIsoC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseKDC Proxy Server service (KPS)0Win32_ServiceKDC Proxy Server service runs on edge servers to proxy Kerberos protocol messages to domain controllers on the corporate network.falseKDC Proxy Server service (KPS)Normal1077KPSSVCC:\Windows\system32\svchost.exe -k KpsSvcGroup00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseKtmRm for Distributed Transaction Coordinator0Win32_ServiceCoordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it is recommended that this service remain stopped. If it is needed, both MSDTC and KTM will start this service automatically. If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start.falseKtmRm for Distributed Transaction CoordinatorNormal1077KtmRmC:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100truetrueServer0Win32_ServiceSupports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseServerNormal0LanmanServerC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100truetrueWorkstation0Win32_ServiceCreates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWorkstationNormal0LanmanWorkstationC:\Windows\System32\svchost.exe -k NetworkService9720Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseLink-Layer Topology Discovery Mapper0Win32_ServiceCreates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device. If this service is disabled, the Network Map will not function properly.falseLink-Layer Topology Discovery MapperNormal1077lltdsvcC:\Windows\System32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueTCP/IP NetBIOS Helper0Win32_ServiceProvides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseTCP/IP NetBIOS HelperNormal0lmhostsC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted8000Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseLocal Session Manager0Win32_ServiceCore Windows Service that manages local user sessions. Stopping or disabling this service will result in system instability.falseLocal Session ManagerNormal0LSMC:\Windows\system32\svchost.exe -k DcomLaunch6360Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseMultimedia Class Scheduler0Win32_ServiceEnables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications. If this service is stopped, individual tasks resort to their default priority.falseMultimedia Class SchedulerNormal1077MMCSSC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWindows Firewall0Win32_ServiceWindows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.falseWindows FirewallNormal0MpsSvcC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork7560Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueDistributed Transaction Coordinator0Win32_ServiceCoordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will fail. If this service is disabled, any services that explicitly depend on it will fail to start.falseDistributed Transaction CoordinatorNormal0MSDTCC:\Windows\System32\msdtc.exe28480Own ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseMicrosoft iSCSI Initiator Service0Win32_ServiceManages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start.falseMicrosoft iSCSI Initiator ServiceNormal1077MSiSCSIC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWindows Installer0Win32_ServiceAdds, modifies, and removes applications provided as a Windows Installer or APPX package (*.msi, *.msp, *.appx). If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows InstallerNormal0msiserverC:\Windows\system32\msiexec.exe /V28280Own ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseNetwork Access Protection Agent0Win32_ServiceThe Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.falseNetwork Access Protection AgentNormal1077napagentC:\Windows\System32\svchost.exe -k NetworkService00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseNetwork Connectivity Assistant0Win32_ServiceProvides DirectAccess status notification for UI componentsfalseNetwork Connectivity AssistantNormal1077NcaSvcC:\Windows\System32\svchost.exe -k NetSvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseNetlogon0Win32_ServiceMaintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.falseNetlogonNormal1077NetlogonC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseNetwork Connections0Win32_ServiceManages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.falseNetwork ConnectionsNormal1077NetmanC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueNetwork List Service0Win32_ServiceIdentifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.falseNetwork List ServiceNormal0netprofmC:\Windows\System32\svchost.exe -k LocalService8840Share ProcesstrueManualNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseNet.Tcp Port Sharing Service0Win32_ServiceProvides ability to share TCP ports over the net.tcp protocol.falseNet.Tcp Port Sharing ServiceNormal1077NetTcpPortSharingC:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueNetwork Location Awareness0Win32_ServiceCollects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseNetwork Location AwarenessNormal0NlaSvcC:\Windows\System32\svchost.exe -k NetworkService9720Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueNetwork Store Interface Service0Win32_ServiceThis service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. Stopping this service will cause loss of network connectivity. If this service is disabled, any other services that explicitly depend on this service will fail to start.falseNetwork Store Interface ServiceNormal0nsiC:\Windows\system32\svchost.exe -k LocalService8840Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Service_all_002.xml000066400000000000000000002232611305406262000251240ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:6362702C-776E-4A22-A586-075C6818AADBhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:D02283E2-128D-4236-9D3B-F662A50F11F8falsetrueNVIDIA Display Driver Service0Win32_ServiceProvides system and desktop level support to the NVIDIA display driverfalseNVIDIA Display Driver ServiceIgnore0nvsvcC:\Windows\system32\nvvsvc.exe6680Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueNVIDIA WMI Provider0Win32_ServicefalseNVIDIA WMI ProviderNormal0NVWMIC:\Windows\system32\nvwmi64.exe6880Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalsePerformance Counter DLL Host0Win32_ServiceEnables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs.falsePerformance Counter DLL HostNormal1077PerfHostC:\Windows\SysWow64\perfhost.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalsePerformance Logs & Alerts0Win32_ServicePerformance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.falsePerformance Logs & AlertsNormal1077plaC:\Windows\System32\svchost.exe -k LocalServiceNoNetwork00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetruePlug and Play0Win32_ServiceEnables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.falsePlug and PlayNormal0PlugPlayC:\Windows\system32\svchost.exe -k DcomLaunch6360Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueIPsec Policy Agent0Win32_ServiceInternet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec". If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. Also,remote management of Windows Firewall is not available when this service is stopped.falseIPsec Policy AgentNormal0PolicyAgentC:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted17440Share ProcesstrueManualNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalsePower0Win32_ServiceManages power policy and power policy notification delivery.falsePowerNormal0PowerC:\Windows\system32\svchost.exe -k DcomLaunch6360Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalsePrinter Extensions and Notifications0Win32_ServiceThis service opens custom printer dialog boxes and handles notifications from a remote print server or a printer. If you turn off this service, you won’t be able to see printer extensions or notifications.truePrinter Extensions and NotificationsNormal1077PrintNotifyC:\Windows\system32\svchost.exe -k print00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueUser Profile Service0Win32_ServiceThis service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully sign in or sign out, apps might have problems getting to users' data, and components registered to receive profile event notifications won't receive them.falseUser Profile ServiceNormal0ProfSvcC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRemote Access Auto Connection Manager0Win32_ServiceCreates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.falseRemote Access Auto Connection ManagerNormal1077RasAutoC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRemote Access Connection Manager0Win32_ServiceManages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemote Access Connection ManagerNormal1077RasManC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRouting and Remote Access0Win32_ServiceOffers routing services to businesses in local area and wide area network environments.falseRouting and Remote AccessNormal1077RemoteAccessC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledlocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRemote Registry0Win32_ServiceEnables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemote RegistryNormal0RemoteRegistryC:\Windows\system32\svchost.exe -k localService00Share ProcessfalseAutoNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRPC Endpoint Mapper0Win32_ServiceResolves RPC interfaces identifiers to transport endpoints. If this service is stopped or disabled, programs using Remote Procedure Call (RPC) services will not function properly.falseRPC Endpoint MapperNormal0RpcEptMapperC:\Windows\system32\svchost.exe -k RPCSS7440Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRemote Procedure Call (RPC) Locator0Win32_ServiceIn Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility.falseRemote Procedure Call (RPC) LocatorNormal1077RpcLocatorC:\Windows\system32\locator.exe00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRemote Procedure Call (RPC)0Win32_ServiceThe RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service running.falseRemote Procedure Call (RPC)Normal0RpcSsC:\Windows\system32\svchost.exe -k rpcss7440Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseResultant Set of Policy Provider0Win32_ServiceProvides a network service that processes requests to simulate application of Group Policy settings for a target user or computer in various situations and computes the Resultant Set of Policy settings.falseResultant Set of Policy ProviderNormal1077RSoPProvC:\Windows\system32\RSoPProv.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSpecial Administration Console Helper0Win32_ServiceAllows administrators to remotely access a command prompt using Emergency Management Services.falseSpecial Administration Console HelperNormal1077sacsvrC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSecurity Accounts Manager0Win32_ServiceThe startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.falseSecurity Accounts ManagerNormal0SamSsC:\Windows\system32\lsass.exe5480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSmart Card0Win32_ServiceManages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.falseSmart CardNormal1077SCardSvrC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueTask Scheduler0Win32_ServiceEnables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.falseTask SchedulerNormal0ScheduleC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSmart Card Removal Policy0Win32_ServiceAllows the system to be configured to lock the user desktop upon smart card removal.falseSmart Card Removal PolicyNormal1077SCPolicySvcC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSecondary Logon0Win32_ServiceEnables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseSecondary LogonNormal1077seclogonC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueSystem Event Notification Service0Win32_ServiceMonitors system events and notifies subscribers to COM+ Event System of these events.falseSystem Event Notification ServiceNormal0SENSC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueRemote Desktop Configuration0Win32_ServiceRemote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and RD certificates.falseRemote Desktop ConfigurationNormal0SessionEnvC:\Windows\System32\svchost.exe -k netsvcs8520Share ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseInternet Connection Sharing (ICS)0Win32_ServiceProvides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.falseInternet Connection Sharing (ICS)Normal1077SharedAccessC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseShell Hardware Detection0Win32_ServiceProvides notifications for AutoPlay hardware events.falseShell Hardware DetectionIgnore0ShellHWDetectionC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSNMP Trap0Win32_ServiceReceives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start.falseSNMP TrapNormal1077SNMPTRAPC:\Windows\System32\snmptrap.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetruePrint Spooler0Win32_ServiceThis service spools print jobs and handles interaction with the printer. If you turn off this service, you won’t be able to print or see your printers.truePrint SpoolerNormal0SpoolerC:\Windows\System32\spoolsv.exe10760Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSoftware Protection0Win32_ServiceEnables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service.falseSoftware ProtectionNormal0sppsvcC:\Windows\system32\sppsvc.exe00Own ProcessfalseAutoNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSSDP Discovery0Win32_ServiceDiscovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start.falseSSDP DiscoveryNormal1077SSDPSRVC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSecure Socket Tunneling Protocol Service0Win32_ServiceProvides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. If this service is disabled, users will not be able to use SSTP to access remote servers.falseSecure Socket Tunneling Protocol ServiceNormal1077SstpSvcC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueNVIDIA Stereoscopic 3D Driver Service0Win32_ServiceProvides system support for NVIDIA Stereoscopic 3D driverfalseNVIDIA Stereoscopic 3D Driver ServiceNormal0Stereo ServiceC:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe7040Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSpot Verifier0Win32_ServiceVerifies potential file system corruptions.falseSpot VerifierNormal1077svsvcC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseMicrosoft Software Shadow Copy Provider0Win32_ServiceManages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.falseMicrosoft Software Shadow Copy ProviderNormal1077swprvC:\Windows\System32\svchost.exe -k swprv00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSuperfetch0Win32_ServiceMaintains and improves system performance over time.falseSuperfetchIgnore1077SysMainC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseTelephony0Win32_ServiceProvides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.falseTelephonyNormal1077TapiSrvC:\Windows\System32\svchost.exe -k tapisrv00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueRemote Desktop Services0Win32_ServiceAllows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.falseRemote Desktop ServicesNormal0TermServiceC:\Windows\System32\svchost.exe -k termsvcs17200Share ProcesstrueManualNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueThemes0Win32_ServiceProvides user experience theme management.falseThemesNormal0ThemesC:\Windows\System32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseThread Ordering Server0Win32_ServiceProvides ordered execution for a group of threads within a specific period of time.falseThread Ordering ServerNormal1077THREADORDERC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueDistributed Link Tracking Client0Win32_ServiceMaintains links between NTFS files within a computer or across computers in a network.falseDistributed Link Tracking ClientNormal0TrkWksC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted11200Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Modules Installer0Win32_ServiceEnables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer.falseWindows Modules InstallerNormal0TrustedInstallerC:\Windows\servicing\TrustedInstaller.exe00Own ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueUser Access Logging Service0Win32_ServiceThis service logs unique client access requests, in the form of IP addresses and user names, of installed products and roles on the local server. This information can be queried, via Powershell, by administrators needing to quantify client demand of server software for offline Client Access License (CAL) management. If the service is disabled, client requests will not be logged and will not be retrievable via Powershell queries. Stopping the service will not affect query of historical data (see supporting documentation for steps to delete historical data). The local system administrator must consult his, or her, Windows Server license terms to determine the number of CALs that are required for the server software to be appropriately licensed; use of the UAL service and data does not alter this obligation.falseUser Access Logging ServiceNormal0UALSVCC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted11200Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseInteractive Services Detection0Win32_ServiceEnables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. If this service is stopped, notifications of new interactive service dialogs will no longer function and there might not be access to interactive service dialogs. If this service is disabled, both notifications of and access to new interactive service dialogs will no longer function.trueInteractive Services DetectionNormal1077UI0DetectC:\Windows\system32\UI0Detect.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueRemote Desktop Services UserMode Port Redirector0Win32_ServiceAllows the redirection of Printers/Drives/Ports for RDP connectionsfalseRemote Desktop Services UserMode Port RedirectorNormal0UmRdpServiceC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted11200Share ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseUPnP Device Host0Win32_ServiceAllows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start.falseUPnP Device HostNormal1077upnphostC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseCredential Manager0Win32_ServiceProvides secure storage and retrieval of credentials to users, applications and security service packages.falseCredential ManagerNormal1077VaultSvcC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseVirtual Disk0Win32_ServiceProvides management services for disks, volumes, file systems, and storage arrays.falseVirtual DiskNormal1077vdsC:\Windows\System32\vds.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Heartbeat Service0Win32_ServiceMonitors the state of this virtual machine by reporting a heartbeat at regular intervals. This service helps you identify running virtual machines that have stopped responding.falseHyper-V Heartbeat ServiceNormal1077vmicheartbeatC:\Windows\system32\svchost.exe -k ICService00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Data Exchange Service0Win32_ServiceProvides a mechanism to exchange data between the virtual machine and the operating system running on the physical computer.falseHyper-V Data Exchange ServiceNormal1077vmickvpexchangeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Remote Desktop Virtualization Service0Win32_ServiceProvides a platform for communication between the virtual machine and the operating system running on the physical computer.falseHyper-V Remote Desktop Virtualization ServiceNormal1077vmicrdvC:\Windows\system32\svchost.exe -k ICService00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Guest Shutdown Service0Win32_ServiceProvides a mechanism to shut down the operating system of this virtual machine from the management interfaces on the physical computer.falseHyper-V Guest Shutdown ServiceNormal1077vmicshutdownC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Time Synchronization Service0Win32_ServiceSynchronizes the system time of this virtual machine with the system time of the physical computer.falseHyper-V Time Synchronization ServiceNormal1077vmictimesyncC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Volume Shadow Copy Requestor0Win32_ServiceCoordinates the communications that are required to use Volume Shadow Copy Service to back up applications and data on this virtual machine from the operating system on the physical computer.falseHyper-V Volume Shadow Copy RequestorNormal1077vmicvssC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueVolume Shadow Copy0Win32_ServiceManages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.falseVolume Shadow CopyNormal0VSSC:\Windows\system32\vssvc.exe22080Own ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Time0Win32_ServiceMaintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows TimeNormal1077W32TimeC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Color System0Win32_ServiceThe WcsPlugInService service hosts third-party Windows Color System color device model and gamut map model plug-in modules. These plug-in modules are vendor-specific extensions to the Windows Color System baseline color device and gamut map models. Stopping or disabling the WcsPlugInService service will disable this extensibility feature, and the Windows Color System will use its baseline model processing rather than the vendor's desired processing. This might result in inaccurate color rendering.falseWindows Color SystemNormal1077WcsPlugInServiceC:\Windows\system32\svchost.exe -k wcssvc00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDiagnostic Service Host0Win32_ServiceThe Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context. If this service is stopped, any diagnostics that depend on it will no longer function.falseDiagnostic Service HostNormal1077WdiServiceHostC:\Windows\System32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDiagnostic System Host0Win32_ServiceThe Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context. If this service is stopped, any diagnostics that depend on it will no longer function.falseDiagnostic System HostNormal1077WdiSystemHostC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Event Collector0Win32_ServiceThis service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.falseWindows Event CollectorNormal1077WecsvcC:\Windows\system32\svchost.exe -k NetworkService00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseProblem Reports and Solutions Control Panel Support0Win32_ServiceThis service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel.falseProblem Reports and Solutions Control Panel SupportNormal1077wercplsupportC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Service_all_003.xml000066400000000000000000000332151305406262000251230ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:175CCF88-4AA9-4E4D-B789-F031EACEA9EAhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0falsefalseWindows Error Reporting Service0Win32_ServiceAllows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.falseWindows Error Reporting ServiceIgnore1077WerSvcC:\Windows\System32\svchost.exe -k WerSvcGroup00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWinHTTP Web Proxy Auto-Discovery Service0Win32_ServiceWinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol.falseWinHTTP Web Proxy Auto-Discovery ServiceNormal0WinHttpAutoProxySvcC:\Windows\system32\svchost.exe -k LocalService8840Share ProcesstrueManualNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100truetrueWindows Management Instrumentation0Win32_ServiceProvides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows Management InstrumentationIgnore0WinmgmtC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutolocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWindows Remote Management (WS-Management)0Win32_ServiceWindows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine. The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.falseWindows Remote Management (WS-Management)Normal0WinRMC:\Windows\System32\svchost.exe -k NetworkService9720Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWMI Performance Adapter0Win32_ServiceProvides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated.falseWMI Performance AdapterNormal0wmiApSrvC:\Windows\system32\wbem\WmiApSrv.exe15160Own ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalsePortable Device Enumerator Service0Win32_ServiceEnforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.falsePortable Device Enumerator ServiceNormal0WPDBusEnumC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Store Service (WSService)0Win32_ServiceProvides infrastructure support for Windows Store.This service is started on demand and if disabled applications bought using Windows Store will not behave correctly.falseWindows Store Service (WSService)Normal1077WSServiceC:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Update0Win32_ServiceEnables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API.falseWindows UpdateNormal1077wuauservC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Driver Foundation - User-mode Driver Framework0Win32_ServiceCreates and manages user-mode driver processes. This service cannot be stopped.falseWindows Driver Foundation - User-mode Driver FrameworkNormal1077wudfsvcC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueCitrix Tools for Virtual Machines Service0Win32_ServiceMonitors and provides various metrics to XenStorefalseCitrix Tools for Virtual Machines ServiceNormal0xensvc"C:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe"13440Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Service_star_000.xml000066400000000000000000000040201305406262000253110ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:1677C913-6736-441D-969C-B0675FB1F43Bhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:6C0AB864-47F9-4D3E-8601-B786754BBABBfalsefalseApplication Experience0Win32_ServiceProcesses application compatibility cache requests for applications as they are launchedfalseApplication ExperienceNormal1077AeLookupSvcC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Service_star_001.xml000066400000000000000000002226601305406262000253260ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:AF6CB895-D664-4E76-AD24-E164875D8EC1http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:69C1232D-0042-447B-BBA4-F6DD9324B110falsefalseApplication Layer Gateway Service0Win32_ServiceProvides support for 3rd party protocol plug-ins for Internet Connection SharingfalseApplication Layer Gateway ServiceNormal1077ALGC:\Windows\System32\alg.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows All-User Install Agent0Win32_ServiceInstall AppX Packages for all authorized usersfalseWindows All-User Install AgentNormal1077AllUserInstallAgentC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseApplication Identity0Win32_ServiceDetermines and verifies the identity of an application. Disabling this service will prevent AppLocker from being enforced.falseApplication IdentityNormal1077AppIDSvcC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted00Share ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseApplication Information0Win32_ServiceFacilitates the running of interactive applications with additional administrative privileges. If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.falseApplication InformationNormal1077AppinfoC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseApplication Management0Win32_ServiceProcesses installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.falseApplication ManagementNormal1077AppMgmtC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Audio Endpoint Builder0Win32_ServiceManages audio devices for the Windows Audio service. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to startfalseWindows Audio Endpoint BuilderNormal1077AudioEndpointBuilderC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Audio0Win32_ServiceManages audio for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to startfalseWindows AudioNormal1077AudiosrvC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueBase Filtering Engine0Win32_ServiceThe Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.falseBase Filtering EngineNormal0BFEC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork7560Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseBackground Intelligent Transfer Service0Win32_ServiceTransfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.falseBackground Intelligent Transfer ServiceNormal1077BITSC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseBackground Tasks Infrastructure Service0Win32_ServiceWindows infrastructure service that controls which background tasks can run on the system.falseBackground Tasks Infrastructure ServiceNormal0BrokerInfrastructureC:\Windows\system32\svchost.exe -k DcomLaunch6360Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseComputer Browser0Win32_ServiceMaintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.falseComputer BrowserNormal1077BrowserC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueCertificate Propagation0Win32_ServiceCopies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver.falseCertificate PropagationNormal0CertPropSvcC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseCloudFormation cfn-hup0Win32_ServiceCloudFormation cfn-hup for WindowsfalseCloudFormation cfn-hupIgnore1077cfn-hup"C:\Program Files\Amazon\cfn-bootstrap\winhup.exe"00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseCOM+ System Application0Win32_ServiceManages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ System ApplicationNormal1077COMSysAppC:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueCryptographic Services0Win32_ServiceProvides three management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseCryptographic ServicesNormal0CryptSvcC:\Windows\system32\svchost.exe -k NetworkService9720Share ProcesstrueAutoNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDCOM Server Process Launcher0Win32_ServiceThe DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running.falseDCOM Server Process LauncherNormal0DcomLaunchC:\Windows\system32\svchost.exe -k DcomLaunch6360Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseOptimize drives0Win32_ServiceHelps the computer run more efficiently by optimizing files on storage drives.falseOptimize drivesNormal1077defragsvcC:\Windows\system32\svchost.exe -k defragsvc00Own ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDevice Association Service0Win32_ServiceEnables pairing between the system and wired or wireless devices.falseDevice Association ServiceNormal1077DeviceAssociationServiceC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDevice Install Service0Win32_ServiceEnables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.falseDevice Install ServiceNormal0DeviceInstallC:\Windows\system32\svchost.exe -k DcomLaunch00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueDHCP Client0Win32_ServiceRegisters and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.falseDHCP ClientNormal0DhcpC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted8000Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueDNS Client0Win32_ServiceThe DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computer's name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start.falseDNS ClientNormal0DnscacheC:\Windows\system32\svchost.exe -k NetworkService9720Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWired AutoConfig0Win32_ServiceThe Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service.falseWired AutoConfigNormal1077dot3svcC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueDiagnostic Policy Service0Win32_ServiceThe Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components. If this service is stopped, diagnostics will no longer function.falseDiagnostic Policy ServiceNormal0DPSC:\Windows\System32\svchost.exe -k LocalServiceNoNetwork7560Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDevice Setup Manager0Win32_ServiceEnables the detection, download and installation of device-related software. If this service is disabled, devices may be configured with outdated software, and may not work correctly.falseDevice Setup ManagerNormal1077DsmSvcC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseExtensible Authentication Protocol0Win32_ServiceThe Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP). EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process. If you disable this service, this computer is prevented from accessing networks that require EAP authentication.falseExtensible Authentication ProtocolNormal1077EaphostC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueEc2Config0Win32_ServiceEc2 Configuration ServicefalseEc2ConfigNormal0Ec2Config"C:\Program Files\Amazon\Ec2ConfigService\Ec2Config.exe"11560Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseEncrypting File System (EFS)0Win32_ServiceProvides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.falseEncrypting File System (EFS)Normal1077EFSC:\Windows\System32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWindows Event Log0Win32_ServiceThis service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.falseWindows Event LogNormal0EventLogC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted8000Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueCOM+ Event System0Win32_ServiceSupports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.falseCOM+ Event SystemNormal0EventSystemC:\Windows\system32\svchost.exe -k LocalService8840Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseFunction Discovery Provider Host0Win32_ServiceThe FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services – Discovery (WS-D) protocol. Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources.falseFunction Discovery Provider HostNormal1077fdPHostC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseFunction Discovery Resource Publication0Win32_ServicePublishes this computer and resources attached to this computer so they can be discovered over the network. If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.falseFunction Discovery Resource PublicationNormal1077FDResPubC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWindows Font Cache Service0Win32_ServiceOptimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance.falseWindows Font Cache ServiceNormal0FontCacheC:\Windows\system32\svchost.exe -k LocalService8840Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Presentation Foundation Font Cache 3.0.0.00Win32_ServiceOptimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.falseWindows Presentation Foundation Font Cache 3.0.0.0Normal1077FontCache3.0.0.0C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe00Own ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueGroup Policy Client0Win32_ServiceThe service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is disabled.falseGroup Policy ClientNormal0gpsvcC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHuman Interface Device Access0Win32_ServiceEnables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.falseHuman Interface Device AccessNormal1077hidservC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHealth Key and Certificate Management0Win32_ServiceProvides X.509 certificate and key management services for the Network Access Protection Agent (NAPAgent). Enforcement technologies that use X.509 certificates may not function properly without this servicefalseHealth Key and Certificate ManagementNormal1077hkmsvcC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueIKE and AuthIP IPsec Keying Modules0Win32_ServiceThe IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.falseIKE and AuthIP IPsec Keying ModulesNormal0IKEEXTC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueIP Helper0Win32_ServiceProvides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.falseIP HelperNormal0iphlpsvcC:\Windows\System32\svchost.exe -k NetSvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseCNG Key Isolation0Win32_ServiceThe CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.falseCNG Key IsolationNormal1077KeyIsoC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseKDC Proxy Server service (KPS)0Win32_ServiceKDC Proxy Server service runs on edge servers to proxy Kerberos protocol messages to domain controllers on the corporate network.falseKDC Proxy Server service (KPS)Normal1077KPSSVCC:\Windows\system32\svchost.exe -k KpsSvcGroup00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseKtmRm for Distributed Transaction Coordinator0Win32_ServiceCoordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it is recommended that this service remain stopped. If it is needed, both MSDTC and KTM will start this service automatically. If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start.falseKtmRm for Distributed Transaction CoordinatorNormal1077KtmRmC:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100truetrueServer0Win32_ServiceSupports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseServerNormal0LanmanServerC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100truetrueWorkstation0Win32_ServiceCreates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWorkstationNormal0LanmanWorkstationC:\Windows\System32\svchost.exe -k NetworkService9720Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseLink-Layer Topology Discovery Mapper0Win32_ServiceCreates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device. If this service is disabled, the Network Map will not function properly.falseLink-Layer Topology Discovery MapperNormal1077lltdsvcC:\Windows\System32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueTCP/IP NetBIOS Helper0Win32_ServiceProvides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseTCP/IP NetBIOS HelperNormal0lmhostsC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted8000Share ProcesstrueAutoNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseLocal Session Manager0Win32_ServiceCore Windows Service that manages local user sessions. Stopping or disabling this service will result in system instability.falseLocal Session ManagerNormal0LSMC:\Windows\system32\svchost.exe -k DcomLaunch6360Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseMultimedia Class Scheduler0Win32_ServiceEnables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications. If this service is stopped, individual tasks resort to their default priority.falseMultimedia Class SchedulerNormal1077MMCSSC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWindows Firewall0Win32_ServiceWindows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.falseWindows FirewallNormal0MpsSvcC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork7560Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueDistributed Transaction Coordinator0Win32_ServiceCoordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will fail. If this service is disabled, any services that explicitly depend on it will fail to start.falseDistributed Transaction CoordinatorNormal0MSDTCC:\Windows\System32\msdtc.exe28480Own ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseMicrosoft iSCSI Initiator Service0Win32_ServiceManages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start.falseMicrosoft iSCSI Initiator ServiceNormal1077MSiSCSIC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Service_star_002.xml000066400000000000000000002236171305406262000253320ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:83E3D1F6-5E03-4E3C-A3D0-2FE81CF7C2FDhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0uuid:5F1294CE-8E09-46E7-BC4F-5ECBC9A0F353falsetrueWindows Installer0Win32_ServiceAdds, modifies, and removes applications provided as a Windows Installer or APPX package (*.msi, *.msp, *.appx). If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows InstallerNormal0msiserverC:\Windows\system32\msiexec.exe /V28280Own ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseNetwork Access Protection Agent0Win32_ServiceThe Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.falseNetwork Access Protection AgentNormal1077napagentC:\Windows\System32\svchost.exe -k NetworkService00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseNetwork Connectivity Assistant0Win32_ServiceProvides DirectAccess status notification for UI componentsfalseNetwork Connectivity AssistantNormal1077NcaSvcC:\Windows\System32\svchost.exe -k NetSvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseNetlogon0Win32_ServiceMaintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.falseNetlogonNormal1077NetlogonC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseNetwork Connections0Win32_ServiceManages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.falseNetwork ConnectionsNormal1077NetmanC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueNetwork List Service0Win32_ServiceIdentifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.falseNetwork List ServiceNormal0netprofmC:\Windows\System32\svchost.exe -k LocalService8840Share ProcesstrueManualNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseNet.Tcp Port Sharing Service0Win32_ServiceProvides ability to share TCP ports over the net.tcp protocol.falseNet.Tcp Port Sharing ServiceNormal1077NetTcpPortSharingC:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueNetwork Location Awareness0Win32_ServiceCollects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseNetwork Location AwarenessNormal0NlaSvcC:\Windows\System32\svchost.exe -k NetworkService9720Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueNetwork Store Interface Service0Win32_ServiceThis service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. Stopping this service will cause loss of network connectivity. If this service is disabled, any other services that explicitly depend on this service will fail to start.falseNetwork Store Interface ServiceNormal0nsiC:\Windows\system32\svchost.exe -k LocalService8840Share ProcesstrueAutoNT Authority\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueNVIDIA Display Driver Service0Win32_ServiceProvides system and desktop level support to the NVIDIA display driverfalseNVIDIA Display Driver ServiceIgnore0nvsvcC:\Windows\system32\nvvsvc.exe6680Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueNVIDIA WMI Provider0Win32_ServicefalseNVIDIA WMI ProviderNormal0NVWMIC:\Windows\system32\nvwmi64.exe6880Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalsePerformance Counter DLL Host0Win32_ServiceEnables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs.falsePerformance Counter DLL HostNormal1077PerfHostC:\Windows\SysWow64\perfhost.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalsePerformance Logs & Alerts0Win32_ServicePerformance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.falsePerformance Logs & AlertsNormal1077plaC:\Windows\System32\svchost.exe -k LocalServiceNoNetwork00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetruePlug and Play0Win32_ServiceEnables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.falsePlug and PlayNormal0PlugPlayC:\Windows\system32\svchost.exe -k DcomLaunch6360Share ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueIPsec Policy Agent0Win32_ServiceInternet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec". If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. Also,remote management of Windows Firewall is not available when this service is stopped.falseIPsec Policy AgentNormal0PolicyAgentC:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted17440Share ProcesstrueManualNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalsePower0Win32_ServiceManages power policy and power policy notification delivery.falsePowerNormal0PowerC:\Windows\system32\svchost.exe -k DcomLaunch6360Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalsePrinter Extensions and Notifications0Win32_ServiceThis service opens custom printer dialog boxes and handles notifications from a remote print server or a printer. If you turn off this service, you won’t be able to see printer extensions or notifications.truePrinter Extensions and NotificationsNormal1077PrintNotifyC:\Windows\system32\svchost.exe -k print00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueUser Profile Service0Win32_ServiceThis service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully sign in or sign out, apps might have problems getting to users' data, and components registered to receive profile event notifications won't receive them.falseUser Profile ServiceNormal0ProfSvcC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRemote Access Auto Connection Manager0Win32_ServiceCreates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.falseRemote Access Auto Connection ManagerNormal1077RasAutoC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRemote Access Connection Manager0Win32_ServiceManages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemote Access Connection ManagerNormal1077RasManC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRouting and Remote Access0Win32_ServiceOffers routing services to businesses in local area and wide area network environments.falseRouting and Remote AccessNormal1077RemoteAccessC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledlocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRemote Registry0Win32_ServiceEnables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.falseRemote RegistryNormal0RemoteRegistryC:\Windows\system32\svchost.exe -k localService00Share ProcessfalseAutoNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRPC Endpoint Mapper0Win32_ServiceResolves RPC interfaces identifiers to transport endpoints. If this service is stopped or disabled, programs using Remote Procedure Call (RPC) services will not function properly.falseRPC Endpoint MapperNormal0RpcEptMapperC:\Windows\system32\svchost.exe -k RPCSS7440Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRemote Procedure Call (RPC) Locator0Win32_ServiceIn Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility.falseRemote Procedure Call (RPC) LocatorNormal1077RpcLocatorC:\Windows\system32\locator.exe00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseRemote Procedure Call (RPC)0Win32_ServiceThe RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service running.falseRemote Procedure Call (RPC)Normal0RpcSsC:\Windows\system32\svchost.exe -k rpcss7440Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseResultant Set of Policy Provider0Win32_ServiceProvides a network service that processes requests to simulate application of Group Policy settings for a target user or computer in various situations and computes the Resultant Set of Policy settings.falseResultant Set of Policy ProviderNormal1077RSoPProvC:\Windows\system32\RSoPProv.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSpecial Administration Console Helper0Win32_ServiceAllows administrators to remotely access a command prompt using Emergency Management Services.falseSpecial Administration Console HelperNormal1077sacsvrC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSecurity Accounts Manager0Win32_ServiceThe startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.falseSecurity Accounts ManagerNormal0SamSsC:\Windows\system32\lsass.exe5480Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSmart Card0Win32_ServiceManages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.falseSmart CardNormal1077SCardSvrC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueTask Scheduler0Win32_ServiceEnables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.falseTask SchedulerNormal0ScheduleC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSmart Card Removal Policy0Win32_ServiceAllows the system to be configured to lock the user desktop upon smart card removal.falseSmart Card Removal PolicyNormal1077SCPolicySvcC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSecondary Logon0Win32_ServiceEnables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseSecondary LogonNormal1077seclogonC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueSystem Event Notification Service0Win32_ServiceMonitors system events and notifies subscribers to COM+ Event System of these events.falseSystem Event Notification ServiceNormal0SENSC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueRemote Desktop Configuration0Win32_ServiceRemote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and RD certificates.falseRemote Desktop ConfigurationNormal0SessionEnvC:\Windows\System32\svchost.exe -k netsvcs8520Share ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseInternet Connection Sharing (ICS)0Win32_ServiceProvides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.falseInternet Connection Sharing (ICS)Normal1077SharedAccessC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseDisabledLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseShell Hardware Detection0Win32_ServiceProvides notifications for AutoPlay hardware events.falseShell Hardware DetectionIgnore0ShellHWDetectionC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseAutoLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSNMP Trap0Win32_ServiceReceives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start.falseSNMP TrapNormal1077SNMPTRAPC:\Windows\System32\snmptrap.exe00Own ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetruePrint Spooler0Win32_ServiceThis service spools print jobs and handles interaction with the printer. If you turn off this service, you won’t be able to print or see your printers.truePrint SpoolerNormal0SpoolerC:\Windows\System32\spoolsv.exe10760Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSoftware Protection0Win32_ServiceEnables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service.falseSoftware ProtectionNormal0sppsvcC:\Windows\system32\sppsvc.exe00Own ProcessfalseAutoNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSSDP Discovery0Win32_ServiceDiscovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start.falseSSDP DiscoveryNormal1077SSDPSRVC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSecure Socket Tunneling Protocol Service0Win32_ServiceProvides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. If this service is disabled, users will not be able to use SSTP to access remote servers.falseSecure Socket Tunneling Protocol ServiceNormal1077SstpSvcC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT Authority\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueNVIDIA Stereoscopic 3D Driver Service0Win32_ServiceProvides system support for NVIDIA Stereoscopic 3D driverfalseNVIDIA Stereoscopic 3D Driver ServiceNormal0Stereo ServiceC:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe7040Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSpot Verifier0Win32_ServiceVerifies potential file system corruptions.falseSpot VerifierNormal1077svsvcC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseMicrosoft Software Shadow Copy Provider0Win32_ServiceManages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.falseMicrosoft Software Shadow Copy ProviderNormal1077swprvC:\Windows\System32\svchost.exe -k swprv00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseSuperfetch0Win32_ServiceMaintains and improves system performance over time.falseSuperfetchIgnore1077SysMainC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseTelephony0Win32_ServiceProvides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.falseTelephonyNormal1077TapiSrvC:\Windows\System32\svchost.exe -k tapisrv00Own ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueRemote Desktop Services0Win32_ServiceAllows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.false1Remote Desktop ServicesNormal0TermServiceC:\Windows\System32\svchost.exe -k termsvcs17200Share ProcesstrueManualNT Authority\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B1030falsetrueThemes0Win32_ServiceProvides user experience theme management.falseThemesNormal0ThemesC:\Windows\System32\svchost.exe -k netsvcs8520Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseThread Ordering Server0Win32_ServiceProvides ordered execution for a group of threads within a specific period of time.falseThread Ordering ServerNormal1077THREADORDERC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueDistributed Link Tracking Client0Win32_ServiceMaintains links between NTFS files within a computer or across computers in a network.falseDistributed Link Tracking ClientNormal0TrkWksC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted11200Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Modules Installer0Win32_ServiceEnables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer.falseWindows Modules InstallerNormal0TrustedInstallerC:\Windows\servicing\TrustedInstaller.exe00Own ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueUser Access Logging Service0Win32_ServiceThis service logs unique client access requests, in the form of IP addresses and user names, of installed products and roles on the local server. This information can be queried, via Powershell, by administrators needing to quantify client demand of server software for offline Client Access License (CAL) management. If the service is disabled, client requests will not be logged and will not be retrievable via Powershell queries. Stopping the service will not affect query of historical data (see supporting documentation for steps to delete historical data). The local system administrator must consult his, or her, Windows Server license terms to determine the number of CALs that are required for the server software to be appropriately licensed; use of the UAL service and data does not alter this obligation.falseUser Access Logging ServiceNormal0UALSVCC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted11200Share ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Service_star_003.xml000066400000000000000000001224201305406262000253210ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:EA5A383C-E4AC-405F-B5D1-EF5C00015DE1http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0falsefalseInteractive Services Detection0Win32_ServiceEnables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. If this service is stopped, notifications of new interactive service dialogs will no longer function and there might not be access to interactive service dialogs. If this service is disabled, both notifications of and access to new interactive service dialogs will no longer function.trueInteractive Services DetectionNormal1077UI0DetectC:\Windows\system32\UI0Detect.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueRemote Desktop Services UserMode Port Redirector0Win32_ServiceAllows the redirection of Printers/Drives/Ports for RDP connectionsfalseRemote Desktop Services UserMode Port RedirectorNormal0UmRdpServiceC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted11200Share ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseUPnP Device Host0Win32_ServiceAllows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start.falseUPnP Device HostNormal1077upnphostC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseDisabledNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseCredential Manager0Win32_ServiceProvides secure storage and retrieval of credentials to users, applications and security service packages.falseCredential ManagerNormal1077VaultSvcC:\Windows\system32\lsass.exe00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseVirtual Disk0Win32_ServiceProvides management services for disks, volumes, file systems, and storage arrays.falseVirtual DiskNormal1077vdsC:\Windows\System32\vds.exe00Own ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Heartbeat Service0Win32_ServiceMonitors the state of this virtual machine by reporting a heartbeat at regular intervals. This service helps you identify running virtual machines that have stopped responding.falseHyper-V Heartbeat ServiceNormal1077vmicheartbeatC:\Windows\system32\svchost.exe -k ICService00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Data Exchange Service0Win32_ServiceProvides a mechanism to exchange data between the virtual machine and the operating system running on the physical computer.falseHyper-V Data Exchange ServiceNormal1077vmickvpexchangeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Remote Desktop Virtualization Service0Win32_ServiceProvides a platform for communication between the virtual machine and the operating system running on the physical computer.falseHyper-V Remote Desktop Virtualization ServiceNormal1077vmicrdvC:\Windows\system32\svchost.exe -k ICService00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Guest Shutdown Service0Win32_ServiceProvides a mechanism to shut down the operating system of this virtual machine from the management interfaces on the physical computer.falseHyper-V Guest Shutdown ServiceNormal1077vmicshutdownC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Time Synchronization Service0Win32_ServiceSynchronizes the system time of this virtual machine with the system time of the physical computer.falseHyper-V Time Synchronization ServiceNormal1077vmictimesyncC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseHyper-V Volume Shadow Copy Requestor0Win32_ServiceCoordinates the communications that are required to use Volume Shadow Copy Service to back up applications and data on this virtual machine from the operating system on the physical computer.falseHyper-V Volume Shadow Copy RequestorNormal1077vmicvssC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueVolume Shadow Copy0Win32_ServiceManages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.falseVolume Shadow CopyNormal0VSSC:\Windows\system32\vssvc.exe22080Own ProcesstrueManualLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Time0Win32_ServiceMaintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows TimeNormal1077W32TimeC:\Windows\system32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Color System0Win32_ServiceThe WcsPlugInService service hosts third-party Windows Color System color device model and gamut map model plug-in modules. These plug-in modules are vendor-specific extensions to the Windows Color System baseline color device and gamut map models. Stopping or disabling the WcsPlugInService service will disable this extensibility feature, and the Windows Color System will use its baseline model processing rather than the vendor's desired processing. This might result in inaccurate color rendering.falseWindows Color SystemNormal1077WcsPlugInServiceC:\Windows\system32\svchost.exe -k wcssvc00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDiagnostic Service Host0Win32_ServiceThe Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context. If this service is stopped, any diagnostics that depend on it will no longer function.falseDiagnostic Service HostNormal1077WdiServiceHostC:\Windows\System32\svchost.exe -k LocalService00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseDiagnostic System Host0Win32_ServiceThe Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context. If this service is stopped, any diagnostics that depend on it will no longer function.falseDiagnostic System HostNormal1077WdiSystemHostC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Event Collector0Win32_ServiceThis service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.falseWindows Event CollectorNormal1077WecsvcC:\Windows\system32\svchost.exe -k NetworkService00Share ProcessfalseManualNT AUTHORITY\NetworkServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseProblem Reports and Solutions Control Panel Support0Win32_ServiceThis service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel.falseProblem Reports and Solutions Control Panel SupportNormal1077wercplsupportC:\Windows\System32\svchost.exe -k netsvcs00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Error Reporting Service0Win32_ServiceAllows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.falseWindows Error Reporting ServiceIgnore1077WerSvcC:\Windows\System32\svchost.exe -k WerSvcGroup00Share ProcessfalseManuallocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWinHTTP Web Proxy Auto-Discovery Service0Win32_ServiceWinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol.falseWinHTTP Web Proxy Auto-Discovery ServiceNormal0WinHttpAutoProxySvcC:\Windows\system32\svchost.exe -k LocalService8840Share ProcesstrueManualNT AUTHORITY\LocalServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100truetrueWindows Management Instrumentation0Win32_ServiceProvides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.falseWindows Management InstrumentationIgnore0WinmgmtC:\Windows\system32\svchost.exe -k netsvcs8520Share ProcesstrueAutolocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWindows Remote Management (WS-Management)0Win32_ServiceWindows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine. The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.falseWindows Remote Management (WS-Management)Normal0WinRMC:\Windows\System32\svchost.exe -k NetworkService9720Share ProcesstrueAutoNT AUTHORITY\NetworkServiceRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueWMI Performance Adapter0Win32_ServiceProvides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated.falseWMI Performance AdapterNormal0wmiApSrvC:\Windows\system32\wbem\WmiApSrv.exe15160Own ProcesstrueManuallocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalsePortable Device Enumerator Service0Win32_ServiceEnforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.falsePortable Device Enumerator ServiceNormal0WPDBusEnumC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Store Service (WSService)0Win32_ServiceProvides infrastructure support for Windows Store.This service is started on demand and if disabled applications bought using Windows Store will not behave correctly.falseWindows Store Service (WSService)Normal1077WSServiceC:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation00Share ProcessfalseManualNT AUTHORITY\LocalServiceStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Update0Win32_ServiceEnables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API.falseWindows UpdateNormal1077wuauservC:\Windows\system32\svchost.exe -k netsvcs00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsefalseWindows Driver Foundation - User-mode Driver Framework0Win32_ServiceCreates and manages user-mode driver processes. This service cannot be stopped.falseWindows Driver Foundation - User-mode Driver FrameworkNormal1077wudfsvcC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted00Share ProcessfalseManualLocalSystemStoppedOKWin32_ComputerSystemAMAZONA-SDFU7B100falsetrueCitrix Tools for Virtual Machines Service0Win32_ServiceMonitors and provides various metrics to XenStorefalseCitrix Tools for Virtual Machines ServiceNormal0xensvc"C:\Program Files (x86)\Citrix\XenTools\XenGuestAgent.exe"13440Own ProcesstrueAutoLocalSystemRunningOKWin32_ComputerSystemAMAZONA-SDFU7B100txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_SystemEnclosure.properties000066400000000000000000000006331305406262000270470ustar00rootroot00000000000000HotSwappable SKU SerialNumber Width Version Removable PartNumber AudibleAlarm Status Description NumberOfPowerCords Replaceable LockPresent Tag SecurityStatus BreachDescription Manufacturer OtherIdentifyingInfo Name InstallDate VisibleAlarm PoweredOn SMBIOSAssetTag Caption Depth Model CurrentRequiredOrProduced Weight ChassisTypes Height SecurityBreach CableManagementStrategy CreationClassName HeatGeneration txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_SystemEnclosure_all_000.xml000066400000000000000000000036051305406262000266640ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:FC4F9533-3037-4109-B55A-5F8A1C457CA4http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959System Enclosure1Win32_SystemEnclosureSystem EnclosurefalseXenSystem EnclosureSystem Enclosure 0txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_SystemEnclosure_star_000.xml000066400000000000000000000041631305406262000270650ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:E3B35DF3-29D9-48B0-A0DA-E8465EE7D9F5http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959System Enclosure1Win32_SystemEnclosureSystem EnclosurefalseXenSystem EnclosureSystem Enclosure 0txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Volume.properties000066400000000000000000000011211305406262000251430ustar00rootroot00000000000000Capacity DirtyBitSet Automount SerialNumber CreationClassName Label IndexingEnabled QuotasIncomplete SystemName Access PageFilePresent Status PNPDeviceID Description ConfigManagerUserConfig ErrorCleared PowerManagementSupported QuotasEnabled Compressed FileSystem Purpose DriveLetter BootVolume Name InstallDate BlockSize Caption StatusInfo DeviceID ConfigManagerErrorCode ErrorMethodology DriveType QuotasRebuilding SupportsFileBasedCompression NumberOfBlocks FreeSpace MaximumFileNameLength SupportsDiskQuotas ErrorDescription LastErrorCode SystemVolume Availability SystemCreationClassName txwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Volume_all_000.xml000066400000000000000000000046251305406262000247720ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:D8249FC5-3EB3-4F45-A356-023FA1BAE4E4http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:FC15D462-AFBC-4226-9B3E-65A8295B8F79true4096false366997504\\?\Volume{fd3b0936-8863-11e2-940f-806e6f6e6963}\false\\?\Volume{fd3b0936-8863-11e2-940f-806e6f6e6963}\false3NTFS113967104true255\\?\Volume{fd3b0936-8863-11e2-940f-806e6f6e6963}\falsefalsefalsefalse1248565016truetruetruetxwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Volume_all_001.xml000066400000000000000000000043411305406262000247660ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:482C929E-7046-4010-8DC4-BC35ACCB78DDhttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0true4096true31843151872C:\false\\?\Volume{fd3b0937-8863-11e2-940f-806e6f6e6963}\falseC:3NTFS7955570688truetxwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Volume_star_000.xml000066400000000000000000000052111305406262000251630ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/EnumerateResponseuuid:652AE8E0-4FA9-4247-B124-31290186DF12http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:55F28C75-F63E-4F68-8360-A8C478003959uuid:990DC98A-DD52-4467-83BA-764CED445100true4096false366997504\\?\Volume{fd3b0936-8863-11e2-940f-806e6f6e6963}\false\\?\Volume{fd3b0936-8863-11e2-940f-806e6f6e6963}\false3NTFS113967104trueSystem Reserved255\\?\Volume{fd3b0936-8863-11e2-940f-806e6f6e6963}\falsefalsefalsefalse1248565016truetruetruetxwinrm-1.2.7/txwinrm/test/data/server_2012/Win32_Volume_star_001.xml000066400000000000000000000047251305406262000251750ustar00rootroot00000000000000http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponseuuid:B4F46438-E0AA-46D4-9FBD-4D033025A7E6http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousuuid:578DC055-B6C4-4387-B39F-E992D0ED76A0true4096true31843151872C:\false\\?\Volume{fd3b0937-8863-11e2-940f-806e6f6e6963}\falseC:3NTFS7955570688true255C:\truefalsefalsefalse1584491427truetruefalsetxwinrm-1.2.7/txwinrm/test/data_error/000077500000000000000000000000001305406262000200405ustar00rootroot00000000000000txwinrm-1.2.7/txwinrm/test/data_error/max_concurrent.xml000077500000000000000000000050771305406262000236250ustar00rootroot00000000000000 http://schemas.dmtf.org/wbem/wsman/1/wsman/fault uuid:FC8B3741-24C1-4781-A695-1E70F2363AE2 http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous uuid:55F28C75-F63E-4F68-8360-A8C478003959 s:Receiver w:InternalError The WS-Management service cannot process the request. The maximum number of concurrent operations for this user has been exceeded. Close existing operations for this user, or raise the quota for this user. The WS-Management service cannot process the request. This user is allowed a maximum number of 15 concurrent operations, which has been exceeded. Close existing operations for this user, or raise the quota for this user. txwinrm-1.2.7/txwinrm/test/data_shell/000077500000000000000000000000001305406262000200165ustar00rootroot00000000000000txwinrm-1.2.7/txwinrm/test/data_shell/command_resp.xml000077500000000000000000000016501305406262000232140ustar00rootroot00000000000000 http://schemas.microsoft.com/wbem/wsman/1/windows/shell/CommandResponse uuid:A550A9DC-1E4D-4F1E-84B9-D8917166BCE4 http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous uuid:799002D6-F3D9-4CAF-968F-D2802410148F 75233C4B-10BC-4796-A767-2D95F553DEEC txwinrm-1.2.7/txwinrm/test/data_shell/create_resp.xml000077500000000000000000000036461305406262000230500ustar00rootroot00000000000000 http://schemas.xmlsoap.org/ws/2004/09/transfer/CreateResponse uuid:AE6FDC5D-0A18-4C74-BFAB-251F375F3042 http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous uuid:D515053B-134D-4B63-9DA9-6FA9C520A6B4 http://gilroy:5985/wsman http://schemas.microsoft.com/wbem/wsman/1/windows/shell/cmd 81DF6FC4-08CB-4FB4-A75B-33B422885199 81DF6FC4-08CB-4FB4-A75B-33B422885199 http://schemas.microsoft.com/wbem/wsman/1/windows/shell/cmd AMAZONA-Q2R281F\Administrator 10.30.0.10 PT7200.000S stdin stdout stderr P0DT0H0M0S P0DT0H0M0S txwinrm-1.2.7/txwinrm/test/data_shell/receive_resp_01.xml000077500000000000000000000025671305406262000235300ustar00rootroot00000000000000 http://schemas.microsoft.com/wbem/wsman/1/windows/shell/ReceiveResponse uuid:0979F3C4-6EA2-4CEE-8A09-05259233BD13 http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous uuid:D40A0940-F00D-4E7A-9DB2-D668853DC958 DQo= IihQREgtQ1NWIDQuMCki LCJcXEFNQVpPTkEtUTJSMjgxRlxQcm9jZXNzb3IoX1RvdGFsKVwlIFByb2Nlc3NvciBUaW1lIg== txwinrm-1.2.7/txwinrm/test/data_shell/receive_resp_02.xml000077500000000000000000000032001305406262000235120ustar00rootroot00000000000000 http://schemas.microsoft.com/wbem/wsman/1/windows/shell/ReceiveResponse uuid:F5DF8EA6-6D46-43FE-AACB-61D817235F0A http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous uuid:2C7A9C16-DA81-4E08-B4BA-67CF505F9CDB DQoiMDQvMTEvMjAxMyAxNzo1NTowMi4zMzUi LCIwLjAyNDM1MyINCkV4aXRpbmcsIHBsZWFzZSB3YWl0Li4uICAgICAgICAgICAgICAgICAgICAgICAgIA0KVGhlIGNvbW1hbmQgY29tcGxldGVkIHN1Y2Nlc3NmdWxseS4NCg0N 0 txwinrm-1.2.7/txwinrm/test/data_subscribe/000077500000000000000000000000001305406262000206705ustar00rootroot00000000000000txwinrm-1.2.7/txwinrm/test/data_subscribe/pull_resp_01.xml000077500000000000000000000045601305406262000237270ustar00rootroot00000000000000 http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponse uuid:2908B3FC-E69C-4172-856D-D1C3D3D5873B http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous uuid:DC17922E-EBE7-4333-B92A-7157EB372F33 uuid:05071354-C4AD-4745-AA80-1127029F660E 1 2 0 0x80000000000000 3847 Application AMAZONA-Q2R281F test_from_gilroy_cmd_003 test_from_gilroy_cmd_003 Error Info Classic txwinrm-1.2.7/txwinrm/test/data_subscribe/pull_resp_02.xml000077500000000000000000000015001305406262000237170ustar00rootroot00000000000000 http://schemas.xmlsoap.org/ws/2004/09/enumeration/PullResponse uuid:DA55072A-342F-46BE-B6F8-7E81A0C9EABA http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous uuid:EC5180D0-F722-48A4-8155-9D0A4E3976A2 uuid:F31A07AC-3B61-4ECC-A489-1B492FA1E7D6 txwinrm-1.2.7/txwinrm/test/data_subscribe/subscribe_resp.xml000077500000000000000000000024701305406262000244320ustar00rootroot00000000000000 http://schemas.xmlsoap.org/ws/2004/08/eventing/SubscribeResponse uuid:ACFA9E9F-D4C4-4C81-AC90-AB6D82CFACA4 http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous uuid:40E5E215-9AE6-4BB2-BF59-5BE542B6E67B http://gilroy:5985/wsman http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog 885E9924-235C-44EB-9834-B3440B7DCD38 PT0.000S uuid:00A69F40-AF0D-4E6D-93BD-EFE6AADC3F51 txwinrm-1.2.7/txwinrm/test/fetch.py000066400000000000000000000113261305406262000173640ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## """ Fetch data for tests. Fetches target operating system version and uses that for the name of a subfolder in test/data. Next, it fetches XML response for 'select *' queries, and saves to files under test/data/ with filename _star.xml. Then it forms queries with all the properties of the CIM class explicitly listed. It saves theses as _all.xml. Later a unit test can test that the parser output matches for each star and all XML file pair. .properties is also generated and is a list of all properties. """ import os import re import errno import logging from getpass import getpass from twisted.internet import reactor, defer from twisted.internet.protocol import Protocol from ..enumerate import WinrmClient, create_winrm_client, \ create_parser_and_factory, ChainingProtocol, ParserFeedingProtocol logging.basicConfig(level=logging.INFO) HOSTNAME = 'oakland' AUTH_TYPE = 'basic' USERNAME = 'Administrator' PASSWORD = None CIM_CLASSES = [ 'Win32_LogicalDisk', 'Win32_Volume', 'Win32_OperatingSystem', 'Win32_SystemEnclosure', 'Win32_ComputerSystem', 'Win32_Service', 'Win32_IP4RouteTable', 'Win32_NetworkAdapterConfiguration', 'Win32_PerfRawData_Tcpip_NetworkInterface', 'Win32_Processor', 'Win32_Process', 'Win32_PerfRawData_PerfDisk_PhysicalDisk', 'Win32_PerfRawData_PerfProc_Process', 'Win32_Product', ] def mkdir_p(path): try: os.makedirs(path) except OSError as e: if e.errno != errno.EEXIST \ or not os.path.isdir(path): raise def find_required_properties(items): required_props = set(vars(items[0]).keys()) for item in items[1:]: required_props &= set(vars(item).keys()) return required_props class WriteXmlToFileProtocol(Protocol): def __init__(self, file_): self.d = defer.Deferred() self._file = file_ def dataReceived(self, data): self._file.write(data) def connectionLost(self, reason): self._file.close() self.d.callback(None) class WriteXmlToFileHandler(object): def __init__(self, dirname, cim_class, suffix): self._dirname = dirname self._cim_class = cim_class self._suffix = suffix self._response_count = 0 @defer.inlineCallbacks def handle_response(self, response): filename = '{0}_{1}_{2:03}.xml'.format(self._cim_class, self._suffix, self._response_count) self._response_count += 1 f = open(os.path.join(self._dirname, filename), 'w') parser, factory = create_parser_and_factory() reader = ChainingProtocol([WriteXmlToFileProtocol(f), ParserFeedingProtocol(parser)]) response.deliverBody(reader) yield reader.d defer.returnValue((factory.enumeration_context, factory.items)) @defer.inlineCallbacks def do_enumerate(dirname, cim_class, props, query_type): wql = 'select {0} from {1}'.format(props, cim_class) handler = WriteXmlToFileHandler(dirname, cim_class, query_type) client = WinrmClient(HOSTNAME, AUTH_TYPE, USERNAME, PASSWORD, handler) items = yield client.enumerate(wql) defer.returnValue(items) @defer.inlineCallbacks def get_subdirname(): client = create_winrm_client(HOSTNAME, AUTH_TYPE, USERNAME, PASSWORD) wql = 'select Caption from Win32_OperatingSystem' items = yield client.enumerate(wql) match = re.search(r'(2003|2008|2012)', items[0].Caption) defer.returnValue('server_{0}'.format(match.group(1))) @defer.inlineCallbacks def fetch(): subdirname = yield get_subdirname() basedir = os.path.dirname(os.path.abspath(__file__)) dirname = os.path.join(basedir, 'data', subdirname) mkdir_p(dirname) for cim_class in CIM_CLASSES: items = yield do_enumerate(dirname, cim_class, '*', 'star') required_properties = find_required_properties(items) filename = '{0}.properties'.format(cim_class) with open(os.path.join(dirname, filename), 'w') as f: for prop in required_properties: f.write(prop + '\n') props = ','.join(required_properties) yield do_enumerate(dirname, cim_class, props, 'all') reactor.stop() def main(): global PASSWORD PASSWORD = getpass() reactor.callWhenRunning(fetch) reactor.run() if __name__ == '__main__': main() txwinrm-1.2.7/txwinrm/test/missing000077500000000000000000000007131305406262000173160ustar00rootroot00000000000000#! /bin/sh ############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## set -u coverage run --source=txwinrm.$1 `which trial` txwinrm/test/test_$1.py coverage report -m txwinrm-1.2.7/txwinrm/test/precommit000077500000000000000000000014101305406262000176370ustar00rootroot00000000000000#! /bin/sh ############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## ( set -x flake8 --ignore=E122,E123,E501 txwinrm ) || ( echo echo "ERROR: Code does not conform to PEP-8" exit 1 ) || exit 1 echo ( set -x txwinrm/test/cover --fail-under=50 ) || ( echo echo "ERROR: Less than 50% unit test coverage" exit 1 ) || exit 1 echo ( set -x txwinrm/test/complex ) || ( echo echo "ERROR: Code is too complex" exit 1 ) || exit 1 txwinrm-1.2.7/txwinrm/test/test_app.py000066400000000000000000000177331305406262000201220ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## from twisted.trial import unittest from twisted.internet import defer from .. import app INITIAL_STATS = { 'berkeley': [ {'IDProcess': '1580', 'Name': 'WmiPrvSE', 'PercentProcessorTime': '75504484', 'Timestamp_Sys100NS': '130125266503145012'}, {'IDProcess': '1744', 'Name': 'WmiPrvSE#1', 'PercentProcessorTime': '29952192', 'Timestamp_Sys100NS': '130125266503145012'}, {'IDProcess': '3216', 'Name': 'WmiPrvSE#2', 'PercentProcessorTime': '3120020', 'Timestamp_Sys100NS': '130125266503145012'}], 'fremont': [ {'IDProcess': '1904', 'Name': 'wmiprvse', 'PercentProcessorTime': '1469375000', 'Timestamp_Sys100NS': '280719748000'}, {'IDProcess': '256', 'Name': 'wmiprvse', 'PercentProcessorTime': '2997812500', 'Timestamp_Sys100NS': '280719748000'}], 'gilroy': [ {'IDProcess': '1392', 'Name': 'WmiPrvSE', 'PercentProcessorTime': '68016436', 'Timestamp_Sys100NS': '130125266508735505'}, {'IDProcess': '1704', 'Name': 'WmiPrvSE#1', 'PercentProcessorTime': '54288348', 'Timestamp_Sys100NS': '130125266508735505'}, {'IDProcess': '1468', 'Name': 'WmiPrvSE#2', 'PercentProcessorTime': '2340015', 'Timestamp_Sys100NS': '130125266508735505'}], 'milpitas': [ {'IDProcess': '1860', 'Name': 'wmiprvse', 'PercentProcessorTime': '1320625000', 'Timestamp_Sys100NS': '295141036000'}, {'IDProcess': '424', 'Name': 'wmiprvse', 'PercentProcessorTime': '3019531250', 'Timestamp_Sys100NS': '295141036000'}], 'oakland': [ {'IDProcess': '1588', 'Name': 'WmiPrvSE', 'PercentProcessorTime': '520887339', 'Timestamp_Sys100NS': '130125266497964019'}, {'IDProcess': '1896', 'Name': 'WmiPrvSE#1', 'PercentProcessorTime': '3619067199', 'Timestamp_Sys100NS': '130125266497964019'}, {'IDProcess': '336', 'Name': 'WmiPrvSE#2', 'PercentProcessorTime': '1716011', 'Timestamp_Sys100NS': '130125266497964019'}], 'saratoga': [ {'IDProcess': '1664', 'Name': 'WmiPrvSE', 'PercentProcessorTime': '247105584', 'Timestamp_Sys100NS': '130125266497494532'}, {'IDProcess': '2008', 'Name': 'WmiPrvSE#1', 'PercentProcessorTime': '1969356624', 'Timestamp_Sys100NS': '130125266497494532'}, {'IDProcess': '1096', 'Name': 'WmiPrvSE#2', 'PercentProcessorTime': '1404009', 'Timestamp_Sys100NS': '130125266497494532'}, {'IDProcess': '2772', 'Name': 'WmiApSrv', 'PercentProcessorTime': '312002', 'Timestamp_Sys100NS': '130125266497494532'}]} FINAL_STATS = { 'berkeley': [ {'IDProcess': '1580', 'Name': 'WmiPrvSE', 'PercentProcessorTime': '75504484', 'Timestamp_Sys100NS': '130125266605946376'}, {'IDProcess': '1744', 'Name': 'WmiPrvSE#1', 'PercentProcessorTime': '31824204', 'Timestamp_Sys100NS': '130125266605946376'}, {'IDProcess': '3216', 'Name': 'WmiPrvSE#2', 'PercentProcessorTime': '3744024', 'Timestamp_Sys100NS': '130125266605946376'}], 'fremont': [ {'IDProcess': '1904', 'Name': 'wmiprvse', 'PercentProcessorTime': '1471406250', 'Timestamp_Sys100NS': '280823171000'}, {'IDProcess': '256', 'Name': 'wmiprvse', 'PercentProcessorTime': '2998750000', 'Timestamp_Sys100NS': '280823171000'}], 'gilroy': [ {'IDProcess': '1392', 'Name': 'WmiPrvSE', 'PercentProcessorTime': '68016436', 'Timestamp_Sys100NS': '130125266620118791'}, {'IDProcess': '1704', 'Name': 'WmiPrvSE#1', 'PercentProcessorTime': '54756351', 'Timestamp_Sys100NS': '130125266620118791'}, {'IDProcess': '1468', 'Name': 'WmiPrvSE#2', 'PercentProcessorTime': '2808018', 'Timestamp_Sys100NS': '130125266620118791'}], 'milpitas': [ {'IDProcess': '1860', 'Name': 'wmiprvse', 'PercentProcessorTime': '1321718750', 'Timestamp_Sys100NS': '295253707000'}, {'IDProcess': '424', 'Name': 'wmiprvse', 'PercentProcessorTime': '3020000000', 'Timestamp_Sys100NS': '295253707000'}], 'oakland': [ {'IDProcess': '1588', 'Name': 'WmiPrvSE', 'PercentProcessorTime': '521979346', 'Timestamp_Sys100NS': '130125266609972832'}, {'IDProcess': '1896', 'Name': 'WmiPrvSE#1', 'PercentProcessorTime': '3627335252', 'Timestamp_Sys100NS': '130125266609972832'}, {'IDProcess': '336', 'Name': 'WmiPrvSE#2', 'PercentProcessorTime': '2496016', 'Timestamp_Sys100NS': '130125266609972832'}, {'IDProcess': '304', 'Name': 'WmiApSrv', 'PercentProcessorTime': '156001', 'Timestamp_Sys100NS': '130125266609972832'}], 'saratoga': [ {'IDProcess': '1664', 'Name': 'WmiPrvSE', 'PercentProcessorTime': '248977596', 'Timestamp_Sys100NS': '130125266601547272'}, {'IDProcess': '2008', 'Name': 'WmiPrvSE#1', 'PercentProcessorTime': '1970604632', 'Timestamp_Sys100NS': '130125266601547272'}, {'IDProcess': '1096', 'Name': 'WmiPrvSE#2', 'PercentProcessorTime': '2184014', 'Timestamp_Sys100NS': '130125266601547272'}, {'IDProcess': '2772', 'Name': 'WmiApSrv', 'PercentProcessorTime': '312002', 'Timestamp_Sys100NS': '130125266601547272'}]} EXPECTED_CPU_UTIL_INFO = [ ['milpitas', [(0.009707466872575907, 'wmiprvse', '1860'), (0.0041603429453896746, 'wmiprvse', '424')]], ['saratoga', [(0.017990992567461176, 'WmiPrvSE', '1664'), (0.011993995044974119, 'WmiPrvSE#1', '2008'), (0.007496246903108824, 'WmiPrvSE#2', '1096'), (0.0, 'WmiApSrv', '2772')]], ['fremont', [(0.01964021542596908, 'wmiprvse', '1904'), (0.009064714811985728, 'wmiprvse', '256')]], ['berkeley', [(0.0, 'WmiPrvSE', '1580'), (0.01820999255262771, 'WmiPrvSE#1', '1744'), (0.006069997517542569, 'WmiPrvSE#2', '3216')]], ['oakland', [(0.009749295091200679, 'WmiPrvSE', '1588'), (0.07381609140480513, 'WmiPrvSE#1', '1896'), (0.006963782208000485, 'WmiPrvSE#2', '336')]], ['gilroy', [(0.0, 'WmiPrvSE', '1392'), (0.0042017347666543844, 'WmiPrvSE#1', '1704'), (0.0042017347666543844, 'WmiPrvSE#2', '1468')]]] class Client(object): def enumerate(self, wql): return defer.succeed("foo") class FakeItem(object): pass def convert_stats(stats_with_dicts): new_stats = {} for key, dcts in stats_with_dicts.iteritems(): new_stats[key] = [] for dct in dcts: item = FakeItem() item.IDProcess = dct['IDProcess'] item.Name = dct['Name'] item.PercentProcessorTime = dct['PercentProcessorTime'] item.Timestamp_Sys100NS = dct['Timestamp_Sys100NS'] new_stats[key].append(item) return new_stats class TestApp(unittest.TestCase): def test_get_vmpeak(self): actual = app.get_vmpeak() self.assertIsNotNone(actual) @defer.inlineCallbacks def test_get_remote_process_stats(self): actual = yield app.get_remote_process_stats(Client()) self.assertEqual(actual, 'foo') def test_calculate_remote_cpu_util(self): initial = convert_stats(INITIAL_STATS) final = convert_stats(FINAL_STATS) actual = app.calculate_remote_cpu_util(initial, final) self.assertEqual(actual, EXPECTED_CPU_UTIL_INFO) if __name__ == '__main__': unittest.main() txwinrm-1.2.7/txwinrm/test/test_connection_info.py000066400000000000000000000050361305406262000225050ustar00rootroot00000000000000#!/usr/bin/env python ############################################################################## # # Copyright (C) Zenoss, Inc. 2017, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import unittest from ..util import * class TestConnectionInfo(unittest.TestCase): def test_connection_info(self): conn_info = ConnectionInfo( hostname='hostname', auth_type='basic', username='username', password='password', scheme='http', port=5985, connectiontype='Keep-Alive', keytab='/test', dcip='10.10.10.10', trusted_realm='trusted_realm', trusted_kdc='10.10.20.20', ipaddress='10.10.10.2', service='wsman', envelope_size=512000, locale='en-US', code_page=65001, include_dir='/tmp') self.assertIsNone(verify_conn_info(conn_info)) conn_info = ConnectionInfo( hostname='hostname', auth_type='basic', username='username', password='password', scheme='http', port=5985, connectiontype='Keep-Alive', keytab='/test', dcip='10.10.10.10', trusted_realm='trusted_realm', trusted_kdc='10.10.20.20', ipaddress='10.10.10.2', service='wsman', envelope_size=512000, locale='en-US', code_page=65001) self.assertIsNone(verify_conn_info(conn_info)) conn_info = ConnectionInfo( hostname='hostname', auth_type='basic', username='username', password='password', scheme='http', port=5985, connectiontype='Keep-Alive', keytab='/test', dcip='10.10.10.10', trusted_realm='trusted_realm', trusted_kdc='10.10.20.20', ipaddress='10.10.10.2', service='wsman', envelope_size=512000, locale='en-US', code_page=65001, include_dir='/nonexistent') with self.assertRaises(Exception): verify_include_dir(conn_info) if __name__ == '__main__': unittest.main() suite = unittest.TestLoader().loadTestsFromTestCase(TestConnectionInfo) unittest.TextTestRunner().run(suite) txwinrm-1.2.7/txwinrm/test/test_enumerate.py000066400000000000000000000364251305406262000213260ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## """ This testing requires real Windows machines that are setup manually. """ import os import re import unittest from itertools import izip from xml import sax from datetime import datetime from ..enumerate import create_parser_and_factory, \ ItemsContentHandler, ChainingContentHandler, TextBufferingContentHandler, \ ItemsAccumulator, AddPropertyWithoutItemError, Item, TagStackStateError, \ TagComparer MAX_RESPONSE_FILES = 999 INCOMPARABLE_PROPERTIES = dict( Win32_Process=[ 'KernelModeTime', 'HandleCount', 'PageFaults', 'OtherOperationCount', 'OtherTransferCount', 'PrivatePageCount', 'WorkingSetSize', 'PageFileUsage', 'UserModeTime', 'PeakWorkingSetSize', 'VirtualSize', 'QuotaPagedPoolUsage', 'ThreadCount', 'QuotaNonPagedPoolUsage', 'WriteTransferCount', 'WriteOperationCount', 'ReadOperationCount', 'ReadTransferCount', 'PeakPageFileUsage', 'PeakVirtualSize', 'QuotaPeakPagedPoolUsage', 'QuotaPeakNonPagedPoolUsage'], Win32_Processor=[ 'LoadPercentage'], Win32_IP4RouteTable=[ 'Age'], Win32_PerfRawData_PerfDisk_PhysicalDisk=[ 'PercentDiskReadTime_Base', 'PercentDiskTime_Base', 'PercentDiskWriteTime_Base', 'PercentIdleTime', 'PercentIdleTime_Base', 'Timestamp_PerfTime', 'Timestamp_Sys100NS', 'DiskBytesPersec', 'AvgDisksecPerTransfer_Base', 'AvgDiskBytesPerTransfer', 'AvgDiskQueueLength', 'DiskWriteBytesPersec', 'AvgDiskBytesPerTransfer_Base', 'DiskWritesPersec', 'PercentDiskTime', 'AvgDiskBytesPerWrite', 'AvgDiskBytesPerWrite_Base', 'AvgDisksecPerWrite', 'PercentDiskWriteTime', 'SplitIOPerSec', 'AvgDiskWriteQueueLength', 'AvgDisksecPerTransfer', 'DiskTransfersPersec', 'AvgDisksecPerWrite_Base', 'AvgDiskBytesPerRead', 'AvgDisksecPerRead', 'CurrentDiskQueueLength', 'DiskReadBytesPersec', 'AvgDisksecPerRead_Base', 'AvgDiskBytesPerRead_Base', 'AvgDiskReadQueueLength', 'PercentDiskReadTime', 'DiskReadsPersec'], Win32_OperatingSystem=[ 'FreePhysicalMemory', 'FreeVirtualMemory', 'LocalDateTime'], Win32_PerfRawData_PerfProc_Process=[ 'PercentPrivilegedTime', 'PercentProcessorTime', 'Timestamp_Object', 'Timestamp_PerfTime', 'Timestamp_Sys100NS', 'HandleCount', 'PageFaultsPersec', 'IOOtherOperationsPersec', 'PercentUserTime', 'WorkingSet', 'WorkingSetPrivate', 'IOOtherBytesPersec', 'PoolNonpagedBytes', 'PageFileBytesPeak', 'VirtualBytes', 'WorkingSetPeak', 'PageFileBytes', 'PrivateBytes', 'VirtualBytesPeak', 'ElapsedTime', 'IOWriteBytesPersec', 'IOWriteOperationsPersec', 'IODataBytesPersec', 'IODataOperationsPersec', 'ThreadCount', 'IOReadBytesPersec', 'IOReadOperationsPersec', 'PoolPagedBytes'], Win32_PerfRawData_Tcpip_NetworkInterface=[ 'BytesReceivedPersec', 'BytesSentPersec', 'BytesTotalPersec', 'PacketsPersec', 'PacketsReceivedPersec', 'PacketsReceivedUnicastPersec', 'PacketsSentPersec', 'PacketsSentUnicastPersec', 'Timestamp_PerfTime', 'Timestamp_Sys100NS']) def _is_missing(item, other_props, required_props, item_label): for prop in other_props: if prop not in vars(item): if prop not in required_props: continue print item_label, "missing", prop return True return False def _are_values_equal(left, right, prop, cim_class): if prop not in vars(left) or prop not in vars(right): return True l_value = vars(left).get(prop) r_value = vars(right).get(prop) retval = l_value == r_value if not retval: print '{0} {1}: "{2}" {3} != "{4}" {5}' .format( cim_class, prop, left.Name, l_value, right.Name, r_value) return retval def are_items_equal(left, right, cim_class, required_props): retval = True if _is_missing(left, vars(right).keys(), required_props, 'left'): return False if _is_missing(right, vars(left).keys(), required_props, 'right'): return False for prop in vars(left): if cim_class in INCOMPARABLE_PROPERTIES \ and prop in INCOMPARABLE_PROPERTIES[cim_class]: continue if not _are_values_equal(left, right, prop, cim_class): retval = False return retval class TestWinrm(unittest.TestCase): def setUp(self): # self.maxDiff = None pass def tearDown(self): pass def test_select_star_vs_explicit_fields(self): """ WQL queries that start with 'select *' have different tags in the XML response than queries which specify fields. 'select *' responses use the CIM class as the item element's tag and as the namespace for the tags of each field. WQL queries that specify fields use XmlFragment as the item element's tag and do not use a namespace for the tags of each field.The client should normalize both response types so the item is guaranteed to be consistent before further operations are performed on it. This test goes through a list of queries that explicitly list all fields for the CIM class. It runs the queries on each know host along with a 'select *' query and verifies that the items match. """ data_by_os_version = get_data_by_os_version() for os_version, data_by_cim_class in data_by_os_version.iteritems(): for cim_class, data in data_by_cim_class.iteritems(): star_items = self._get_items(data['star']) all_items = self._get_items(data['all']) self.assertEqual(len(star_items), len(all_items)) for star_item, all_item in izip(star_items, all_items): are_items_equal( star_item, all_item, cim_class, data['properties']) for items in star_items, all_items: for item in items: for prop in data['properties']: self.assertIn(prop, vars(item)) def _get_items(self, xml_texts): enumeration_contexts, items = \ get_enumeration_contexts_and_items(xml_texts) self.assertEqual(len(enumeration_contexts), len(xml_texts)) for enumeration_context in enumeration_contexts[:-1]: self.assertIsNotNone(enumeration_context) self.assertIsNone(enumeration_contexts[-1]) return items def get_enumeration_contexts_and_items(xml_texts): enumeration_contexts = [] items = [] for xml_text in xml_texts: parser, factory = create_parser_and_factory() parser.feed(xml_text) enumeration_contexts.append(factory.enumeration_context) items.extend(factory.items) return enumeration_contexts, items def chop_none_terminated_list(xs): return xs[:xs.index(None)] def _get_cim_class_and_query_type(filename): if '_star_' in filename: cim_class = filename[:-len('_star_NNN.xml')] query_type = 'star' elif '_all_' in filename: cim_class = filename[:-len('_all_NNN.xml')] query_type = 'all' else: raise Exception('unknown query type for file {0}' .format(filename)) return cim_class, query_type def _get_index(filename): i = int(re.search(r'(\d{3})', filename).group(1)) if i > MAX_RESPONSE_FILES: raise Exception('Too many response files: {0} Max is {1}' .format(filename, MAX_RESPONSE_FILES)) return i def _get_data_by_cim_class(root, filenames): data_by_cim_class = {} for filename in filenames: with open(os.path.join(root, filename)) as f: text = f.read() if filename.endswith('.properties'): cim_class = filename.split('.')[0] if cim_class not in data_by_cim_class: data_by_cim_class[cim_class] = {} data_by_cim_class[cim_class]['properties'] = text.splitlines() continue cim_class, query_type = _get_cim_class_and_query_type(filename) if cim_class not in data_by_cim_class: data_by_cim_class[cim_class] = {} if query_type not in data_by_cim_class[cim_class]: data_by_cim_class[cim_class][query_type] = \ [None] * MAX_RESPONSE_FILES index = _get_index(filename) data_by_cim_class[cim_class][query_type][index] = text return data_by_cim_class def get_data_by_os_version(): """ {'server_2008': {'Win32_ComputerSystem': {'all': [] {'star': [] {'properties': [] """ basedir = os.path.dirname(os.path.abspath(__file__)) datadir = os.path.join(basedir, "data") data_by_os_version = {} for root, dirnames, filenames in os.walk(datadir): if root == datadir: continue os_version = os.path.split(root)[-1] data_by_os_version[os_version] = \ _get_data_by_cim_class(root, filenames) for cim_class, data in data_by_os_version[os_version].iteritems(): data['star'] = chop_none_terminated_list(data['star']) data['all'] = chop_none_terminated_list(data['all']) return data_by_os_version CIM_CLASS_FMT = """ {properties} """ XML_FRAGMENT_FMT = """ {properties} """ DATETIME_CIM_CLASS = """ 2013-03-09T03:06:25Z """ DATETIME_XML_FRAGMENT = """ 2013-04-09T15:42:20.4124Z """ NIL_CIM_CLASS = """ """ NIL_XML_FRAGMENT = """ """ EMPTY_CIM_CLASS = """ """ EMPTY_XML_FRAGMENT = """ """ ARRAY_CIM_CLASS = """ LM_Workstation LM_Server NT Server_NT """ ARRAY_XML_FRAGMENT = """ LM_Workstation LM_Server NT Server_NT """ TOO_DEEP = """ """ def parse_xml_str(xml_str): parser = sax.make_parser() parser.setFeature(sax.handler.feature_namespaces, True) text_buffer = TextBufferingContentHandler() items_handler = ItemsContentHandler(text_buffer) content_handler = ChainingContentHandler([text_buffer, items_handler]) parser.setContentHandler(content_handler) parser.feed(xml_str) return items_handler.items class TestDataType(unittest.TestCase): def setUp(self): pass def tearDown(self): pass def _do_test_of_prop_parsing(self, data): for xml_str, prop, expected in data: items = parse_xml_str(xml_str) self.assertEqual(len(items), 1) actual = getattr(items[0], prop) self.assertEqual(actual, expected) def test_items_with_datetime(self): datetime_1 = CIM_CLASS_FMT.format(cim_class='Win32_OperatingSystem', properties=DATETIME_CIM_CLASS) datetime_2 = XML_FRAGMENT_FMT.format(properties=DATETIME_XML_FRAGMENT) data = [(datetime_1, "InstallDate", datetime(2013, 3, 9, 03, 06, 25)), (datetime_2, "CreationDate", datetime(2013, 4, 9, 15, 42, 20, 412400))] self._do_test_of_prop_parsing(data) def test_nil(self): nil_1 = CIM_CLASS_FMT.format( cim_class="Win32_PerfRawData_Tcpip_NetworkInterface", properties=NIL_CIM_CLASS) nil_2 = XML_FRAGMENT_FMT.format(properties=NIL_XML_FRAGMENT) data = [(nil_1, "Caption", None), (nil_2, "Access", None)] self._do_test_of_prop_parsing(data) def test_empty(self): empty_1 = CIM_CLASS_FMT.format(cim_class="Win32_Processor", properties=EMPTY_CIM_CLASS) empty_2 = XML_FRAGMENT_FMT.format(properties=EMPTY_XML_FRAGMENT) data = [(empty_1, "Version", ""), (empty_2, "Version", "")] self._do_test_of_prop_parsing(data) def test_array(self): array_1 = CIM_CLASS_FMT.format(cim_class="Win32_ComputerSystem", properties=ARRAY_CIM_CLASS) array_2 = XML_FRAGMENT_FMT.format(properties=ARRAY_XML_FRAGMENT) prop = "Roles" expected = ["LM_Workstation", "LM_Server", "NT", "Server_NT"] data = [(array_1, prop, expected), (array_2, prop, expected)] self._do_test_of_prop_parsing(data) def test_too_deep(self): xml_str = CIM_CLASS_FMT.format(cim_class="Win32_Blah", properties=TOO_DEEP) self.assertRaises(Exception, parse_xml_str, xml_str) def test_tag_stack_state_error(self): parser = sax.make_parser() parser.setFeature(sax.handler.feature_namespaces, True) text_buffer = TextBufferingContentHandler() items_handler = ItemsContentHandler(text_buffer) content_handler = ChainingContentHandler([text_buffer, items_handler]) parser.setContentHandler(content_handler) xml1 = '' \ '' parser.feed(xml1) tag = TagComparer(None, 'foo') items_handler._tag_stack.append(tag) xml2 = "" self.assertRaises(TagStackStateError, parser.feed, xml2) class TestItemsAccumulator(unittest.TestCase): def test_add_property_without_item(self): self.assertRaises(AddPropertyWithoutItemError, ItemsAccumulator().add_property, "foo", "bar") class TestItem(unittest.TestCase): def test_repr(self): item = Item() self.assertEqual(repr(item), '\n{ }') if __name__ == '__main__': unittest.main() # suite = unittest.TestLoader().loadTestsFromTestCase(TestDataType) # unittest.TextTestRunner().run(suite) txwinrm-1.2.7/txwinrm/test/test_shell.py000066400000000000000000000206631305406262000204450ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import os from datetime import datetime from twisted.trial import unittest from twisted.internet import defer from xml.etree import cElementTree as ET from .tools import create_get_elem_func from ..shell import _build_command_line_elem, _stripped_lines, \ _find_shell_id, _find_command_id, _find_stream, _find_exit_code, \ CommandResponse, SingleShotCommand, LongRunningCommand, Typeperf DATADIR = os.path.join( os.path.dirname(os.path.abspath(__file__)), "data_shell") get_elem = create_get_elem_func(DATADIR) COMMAND_ID = '75233C4B-10BC-4796-A767-2D95F553DEEC' EXPECTED_COMMAND_LINE_ELEM = \ '' \ 'typeperf' \ '"\Processor(_Total)\% Processor Time"' \ '-sc' \ '1' \ '' class FakeRequestSender(object): hostname = 'fake_host' _receive_resp = 'receive_resp_01.xml' def send_request(self, request_template_name, **kwargs): elem = None if request_template_name == 'command': elem = get_elem('command_resp.xml') elif request_template_name == 'create': elem = get_elem('create_resp.xml') elif request_template_name == 'receive': elem = get_elem(self._receive_resp) self._receive_resp = 'receive_resp_02.xml' return defer.succeed(elem) class TestBuildCommandLineElem(unittest.TestCase): def test_build_command_line_elem(self): actual = _build_command_line_elem( r'typeperf "\Processor(_Total)\% Processor Time" -sc 1') self.assertEqual(actual, EXPECTED_COMMAND_LINE_ELEM) class TestStrippedLines(unittest.TestCase): def test_stripped_lines(self): source = ['foo\nbar', 'quux blah\n', '\nblam bloo', 'flim flam floo'] actual = _stripped_lines(source) expected = ['foo', 'barquux blah', 'blam blooflim flam floo'] self.assertEqual(actual, expected) def get_elem(filename): with open(os.path.join(DATADIR, filename)) as f: return ET.fromstring(f.read()) class TestXmlParsing(unittest.TestCase): def test_find_shell_id(self): elem = get_elem('create_resp.xml') actual = _find_shell_id(elem) expected = '81DF6FC4-08CB-4FB4-A75B-33B422885199' self.assertEqual(actual, expected) def test_find_command_id(self): elem = get_elem('command_resp.xml') actual = _find_command_id(elem) expected = COMMAND_ID self.assertEqual(actual, expected) def test_find_stdout(self): elem = get_elem('receive_resp_01.xml') actual = list(_find_stream(elem, COMMAND_ID, 'stdout')) expected = [ '\r\n', '"(PDH-CSV 4.0)"', ',"\\\\AMAZONA-Q2R281F\\Processor(_Total)\\% Processor Time"'] self.assertEqual(actual, expected) elem = get_elem('receive_resp_02.xml') actual = list(_find_stream(elem, COMMAND_ID, 'stdout')) expected = [ '\r\n"04/11/2013 17:55:02.335"', ',"0.024353"\r\nExiting, please wait... ' '\r\nThe command completed successfully.\r\n\r\r', ''] self.assertEqual(actual, expected) def test_find_stderr(self): elem = get_elem('receive_resp_01.xml') actual = list(_find_stream(elem, COMMAND_ID, 'stderr')) expected = [] self.assertEqual(actual, expected) elem = get_elem('receive_resp_02.xml') actual = list(_find_stream(elem, COMMAND_ID, 'stderr')) expected = [''] self.assertEqual(actual, expected) def test_find_exit_code(self): elem = get_elem('receive_resp_01.xml') actual = _find_exit_code(elem, COMMAND_ID) self.assertIsNone(actual) elem = get_elem('receive_resp_02.xml') actual = _find_exit_code(elem, COMMAND_ID) expected = 0 self.assertEqual(actual, expected) class TestCommandResponse(unittest.TestCase): def test_command_response(self): stdout = 'foo' stderr = 'bar' exit_code = 'quux' resp = CommandResponse(stdout, stderr, exit_code) self.assertEqual(resp.stdout, stdout) self.assertEqual(resp.stderr, stderr) self.assertEqual(resp.exit_code, exit_code) self.assertEqual( repr(resp), "{'exit_code': 'quux', 'stderr': 'bar', 'stdout': 'foo'}") class TestSingleShotCommand(unittest.TestCase): @defer.inlineCallbacks def test_run_command(self): command = SingleShotCommand(FakeRequestSender()) cmd_response = yield command.run_command('foo') self.assertEqual(cmd_response.exit_code, 0) self.assertEqual(cmd_response.stderr, []) expected_stdout = ['"(PDH-CSV 4.0)","\\\\AMAZONA-Q2R281F\\Processor(_T' 'otal)\\% Processor Time"', '"04/11/2013 17:55:02.335","0.024353"', 'Exiting, please wait...', 'The command completed successfully.'] self.assertEqual(cmd_response.stdout, expected_stdout) class TestLongRunningCommand(unittest.TestCase): def setUp(self): self._command = LongRunningCommand(FakeRequestSender()) def tearDown(self): self._command = None @defer.inlineCallbacks def test_start(self): yield self._command.start('foo') self.assertEqual(self._command._shell_id, '81DF6FC4-08CB-4FB4-A75B-33B422885199') self.assertEqual(self._command._command_id, '75233C4B-10BC-4796-A767-2D95F553DEEC') self.assertIsNone(self._command._exit_code) @defer.inlineCallbacks def test_receive(self): yield self._command.start('foo') stdout, stderr = yield self._command.receive() self.assertEqual(stdout, ['"(PDH-CSV 4.0)","\\\\AMAZONA-Q2R281F\\Proce' 'ssor(_Total)\\% Processor Time"']) self.assertEqual(stderr, []) self.assertIsNone(self._command._exit_code) @defer.inlineCallbacks def test_stop(self): yield self._command.start('foo') yield self._command.receive() cmd_response = yield self._command.stop() self.assertEqual(cmd_response.exit_code, 0) self.assertEqual(cmd_response.stderr, []) expected_stdout = ['"04/11/2013 17:55:02.335","0.024353"', 'Exiting, please wait...', 'The command completed successfully.'] self.assertEqual(cmd_response.stdout, expected_stdout) class TestTypeperf(unittest.TestCase): def setUp(self): self._command = Typeperf(LongRunningCommand(FakeRequestSender())) def tearDown(self): self._command = None @defer.inlineCallbacks def test_start(self): self.assertEqual(self._command._counters, None) self.assertEqual(self._command._row_count, 0) yield self._command.start(['foo']) self.assertEqual(self._command._counters, ['foo']) self.assertEqual(self._command._row_count, 0) @defer.inlineCallbacks def test_receive(self): yield self._command.start(['foo']) dct, stderr = yield self._command.receive() self.assertEqual(dct, dict(foo=[])) self.assertEqual(stderr, []) self.assertEqual(self._command._counters, ['foo']) self.assertEqual(self._command._row_count, 1) dct, stderr = yield self._command.receive() self.assertEqual(dct, dict(foo=[( datetime(2013, 4, 11, 17, 55, 2, 335000), 0.024353)])) self.assertEqual(stderr, []) self.assertEqual(self._command._counters, ['foo']) self.assertEqual(self._command._row_count, 4) @defer.inlineCallbacks def test_stop(self): yield self._command.start(['foo']) yield self._command.receive() yield self._command.stop() self.assertEqual(self._command._counters, None) self.assertEqual(self._command._row_count, 0) if __name__ == '__main__': unittest.main() txwinrm-1.2.7/txwinrm/test/test_subscribe.py000066400000000000000000000104341305406262000213120ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import os from datetime import datetime from twisted.trial import unittest from twisted.internet import defer from .tools import create_get_elem_func from ..subscribe import _find_subscription_id, _find_enumeration_context, \ _find_events, Event, System, RenderingInfo, EventSubscription DATADIR = os.path.join( os.path.dirname(os.path.abspath(__file__)), "data_subscribe") get_elem = create_get_elem_func(DATADIR) class FakeRequestSender(object): hostname = 'fake_host' def send_request(self, request_template_name, **kwargs): elem = None if request_template_name == 'subscribe': elem = get_elem('subscribe_resp.xml') elif request_template_name == 'event_pull': if kwargs['enumeration_context'] == \ 'uuid:05071354-C4AD-4745-AA80-1127029F660E': elem = get_elem('pull_resp_02.xml') else: elem = get_elem('pull_resp_01.xml') return defer.succeed(elem) class TestXmlParsing(unittest.TestCase): def test_find_subscription_id(self): elem = get_elem('subscribe_resp.xml') actual = _find_subscription_id(elem) expected = '885E9924-235C-44EB-9834-B3440B7DCD38' self.assertEqual(actual, expected) def test_find_enumeration_context(self): elem = get_elem('subscribe_resp.xml') actual = _find_enumeration_context(elem) expected = 'uuid:00A69F40-AF0D-4E6D-93BD-EFE6AADC3F51' self.assertEqual(actual, expected) def test_find_events(self): self.maxDiff = None elem = get_elem('pull_resp_01.xml') actual = list(_find_events(elem)) expected = [ Event( system=System( provider='EventCreate', event_id=1, event_id_qualifiers=0, level=2, task=0, keywords=0x80000000000000, time_created=datetime(2013, 4, 25, 21, 23, 39), event_record_id=3847, channel='Application', computer='AMAZONA-Q2R281F', user_id='S-1-5-21-4253355731-4135319224-1610184190-500'), data='test_from_gilroy_cmd_003', rendering_info=RenderingInfo( culture='en-US', message='test_from_gilroy_cmd_003', level='Error', opcode='Info', keywords=['Classic']))] self.assertEqual(len(actual), len(expected)) self.assertEqual(actual, expected) class TestEventSubscription(unittest.TestCase): def setUp(self): self._subscription = EventSubscription(FakeRequestSender()) def tearDown(self): self._subscription = None @defer.inlineCallbacks def test_subscribe(self): yield self._subscription.subscribe() self.assertIsNotNone(self._subscription._subscription_id) self.assertIsNotNone(self._subscription._enumeration_context) @defer.inlineCallbacks def test_pull(self): yield self._subscription.subscribe() ec = self._subscription._enumeration_context events = [] def append_event(event): events.append(event) yield self._subscription.pull(append_event) self.assertIsNotNone(self._subscription._subscription_id) self.assertIsNotNone(self._subscription._enumeration_context) self.assertNotEqual(ec, self._subscription._enumeration_context) self.assertTrue(events) self.assertEqual(1, len(events)) def test_unsubscribe(self): self._subscription.subscribe() def do_nothing(event): pass self._subscription.pull(do_nothing) self._subscription.unsubscribe() self.assertIsNone(self._subscription._subscription_id) self.assertIsNone(self._subscription._enumeration_context) if __name__ == '__main__': unittest.main() txwinrm-1.2.7/txwinrm/test/test_util.py000066400000000000000000000066411305406262000203130ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## """ This testing requires real Windows machines that are setup manually. """ import os from datetime import datetime import unittest from ..util import _parse_error_message, _get_agent, _StringProducer, \ _get_request_template, get_datetime class TestErrorReader(unittest.TestCase): def test_max_concurrent(self): dirpath = os.path.dirname(os.path.abspath(__file__)) path = os.path.join(dirpath, 'data_error', 'max_concurrent.xml') with open(path) as f: actual = _parse_error_message(f.read()) expected = 'The WS-Management service cannot process the request. ' \ 'The maximum number of concurrent operations for this user has ' \ 'been exceeded. Close existing operations for this user, or ' \ 'raise the quota for this user. The WS-Management service ' \ 'cannot process the request. This user is allowed a maximum ' \ 'number of 15 concurrent operations, which has been exceeded. ' \ 'Close existing operations for this user, or raise the quota ' \ 'for this user.' self.assertEqual(actual, expected) class TestAgent(unittest.TestCase): def test_get_agent(self): agent = _get_agent() self.assertIsNotNone(agent) class TestStringProducer(unittest.TestCase): def test_constructor(self): producer = _StringProducer('foo') self.assertEqual(producer._body, 'foo') self.assertEqual(producer.length, len('foo')) self.assertIsNone(producer.pauseProducing()) self.assertIsNone(producer.stopProducing()) class TestRequestTemplate(unittest.TestCase): def test_get_request_template(self): templ = _get_request_template('enumerate') self.assertIn( 'http://schemas.xmlsoap.org/ws/2004/09/enumeration/Enumerate', templ) class TestGetDateTime(unittest.TestCase): def setUp(self): pass def tearDown(self): pass def test_datetime(self): data = [("2013-04-09T15:42:20.4124Z", datetime(2013, 4, 9, 15, 42, 20, 412400)), ("2013-04-09T15:42:20Z", datetime(2013, 4, 9, 15, 42, 20)), ] for date_str, expected in data: actual = get_datetime(date_str) self.assertEqual(actual, expected) def test_2003_OperatingSystem(self): """ Saw these date strings on test-win2003-1d Win32_OperatingSystem """ data = [("2009-10-21T14:48:42-04:00", datetime(2009, 10, 21, 14, 48, 42)), ("2013-05-24T15:06:05.359375-04:00", datetime(2013, 5, 24, 15, 6, 5, 359375)), ("2013-06-07T14:27:22.874-04:00", datetime(2013, 6, 7, 14, 27, 22, 874000)), ] for date_str, expected in data: actual = get_datetime(date_str) self.assertEqual(actual, expected) if __name__ == '__main__': unittest.main() # suite = unittest.TestLoader().loadTestsFromTestCase(TestDataType) # unittest.TextTestRunner().run(suite) txwinrm-1.2.7/txwinrm/test/tools.py000066400000000000000000000011131305406262000174240ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import os from xml.etree import cElementTree as ET def create_get_elem_func(datadir): def get_elem(filename): with open(os.path.join(datadir, filename)) as f: return ET.fromstring(f.read()) return get_elem txwinrm-1.2.7/txwinrm/typeperf.py000066400000000000000000000045231305406262000171530ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import sys import logging from datetime import datetime from twisted.internet import reactor, defer, task from . import app from .shell import create_typeperf log = logging.getLogger('winrm') class TypeperfUtility(object): @defer.inlineCallbacks def tx_main(self, args, config): try: typeperf = create_typeperf(args.conn_info) yield typeperf.start(args.counters, args.si) yield self._receive_parse_print(args, typeperf) yield typeperf.stop() finally: if reactor.running: reactor.stop() @defer.inlineCallbacks def _receive_parse_print(self, args, typeperf): i = 0 while args.sc == 0 or i < args.sc: if args.sc > 0: i += 1 results, stderr = yield task.deferLater( reactor, args.si, typeperf.receive) for key, values in results.iteritems(): print key for timestamp, value in values: date_str = datetime.strftime(timestamp, "%H:%M:%S") print ' {0}: {1}'.format(date_str, value) for line in stderr: print >>sys.stderr, line def add_args(self, parser): parser.add_argument("--si", type=int, default=1, help="time between samples in seconds") parser.add_argument("--sc", type=int, default=0, help="number of samples to collect") parser.add_argument("counters", nargs='+', help="performance counter paths to log") def check_args(self, args): if args.config: print >>sys.stderr, \ "ERROR: The typeperf command does not support a " \ "configuration file at this time." return not args.config def add_config(self, parser, config): pass def adapt_args_to_config(self, args, config): pass if __name__ == '__main__': app.main(TypeperfUtility()) txwinrm-1.2.7/txwinrm/util.py000077500000000000000000000671751305406262000163110ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import os import re import base64 import logging import httplib from datetime import datetime from collections import namedtuple from xml.etree import cElementTree as ET from xml.etree.ElementTree import ParseError from twisted.internet import reactor, defer from twisted.internet.protocol import Protocol from twisted.web.client import Agent from twisted.internet.ssl import ClientContextFactory from twisted.web.http_headers import Headers from twisted.internet.threads import deferToThread from . import constants as c from .krb5 import kinit, ccname, add_trusted_realm, config # ZEN-15434 lazy import to avoid segmentation fault during install kerberos = None log = logging.getLogger('winrm') _XML_WHITESPACE_PATTERN = re.compile(r'>\s+<') _AGENT = None _MAX_PERSISTENT_PER_HOST = 200 _CACHED_CONNECTION_TIMEOUT = 24000 _CONNECT_TIMEOUT = 500 _NANOSECONDS_PATTERN = re.compile(r'\.(\d{6})(\d{3})') _REQUEST_TEMPLATE_NAMES = ( 'enumerate', 'pull', 'create', 'command', 'send', 'receive', 'signal', 'delete', 'subscribe', 'event_pull', 'unsubscribe') _REQUEST_TEMPLATE_DIR = os.path.join( os.path.dirname(os.path.abspath(__file__)), 'request') _REQUEST_TEMPLATES = {} _CONTENT_TYPE = {'Content-Type': ['application/soap+xml;charset=UTF-8']} _MAX_KERBEROS_RETRIES = 3 _MARKER = object() _ENCRYPTED_CONTENT_TYPE = { "Content-Type": [ "multipart/encrypted;" "protocol=\"application/HTTP-Kerberos-session-encrypted\";" "boundary=\"Encrypted Boundary\""]} _BODY = """--Encrypted Boundary Content-Type: application/HTTP-Kerberos-session-encrypted OriginalContent: type=application/soap+xml;charset=UTF-8;Length={original_length} --Encrypted Boundary Content-Type: application/octet-stream {emsg}--Encrypted Boundary """ _KRB_INTERNAL_CACHE_ERR = 'Internal credentials cache error while storing '\ 'credentials while getting initial credentials' def _has_get_attr(obj, attr_name): attr_value = getattr(obj, attr_name, _MARKER) if attr_value is _MARKER: return False, None return True, attr_value class MyWebClientContextFactory(object): def __init__(self): self._options = ClientContextFactory() def getContext(self, hostname, port): return self._options.getContext() def _get_agent(): context_factory = MyWebClientContextFactory() try: # HTTPConnectionPool has been present since Twisted version 12.1 from twisted.web.client import HTTPConnectionPool pool = HTTPConnectionPool(reactor, persistent=True) pool.maxPersistentPerHost = _MAX_PERSISTENT_PER_HOST pool.cachedConnectionTimeout = _CACHED_CONNECTION_TIMEOUT agent = Agent(reactor, context_factory, connectTimeout=_CONNECT_TIMEOUT, pool=pool) except ImportError: from _zenclient import ZenAgent agent = ZenAgent(reactor, context_factory, persistent=True, maxConnectionsPerHostName=1) return agent class _StringProducer(object): """ The length attribute must be a non-negative integer or the constant twisted.web.iweb.UNKNOWN_LENGTH. If the length is known, it will be used to specify the value for the Content-Length header in the request. If the length is unknown the attribute should be set to UNKNOWN_LENGTH. Since more servers support Content-Length, if a length can be provided it should be. """ def __init__(self, body): self._body = body self.length = len(body) def startProducing(self, consumer): """ This method is used to associate a consumer with the producer. It should return a Deferred which fires when all data has been produced. """ consumer.write(self._body) return defer.succeed(None) def pauseProducing(self): pass def stopProducing(self): pass def _parse_error_message(xml_str): if not xml_str: return "" try: elem = ET.fromstring(xml_str) text = elem.findtext('.//{' + c.XML_NS_SOAP_1_2 + '}Text').strip() detail = elem.findtext('.//{' + c.XML_NS_SOAP_1_2 + '}Detail/*/*').strip() except ParseError: return "Malformed XML: {}".format(xml_str) except Exception: return "Unexpected Response ({})".format(xml_str) return "{0} {1}".format(text, detail) class _ErrorReader(Protocol): def __init__(self, gssclient=None): self.d = defer.Deferred() self._data = [] self.gssclient = gssclient def dataReceived(self, data): self._data.append(data) def connectionLost(self, reason): if self.gssclient: body = self.gssclient.decrypt_body(''.join(self._data)) else: body = ''.join(self._data) message = _parse_error_message(body) self.d.callback(message) class RequestError(Exception): pass class ForbiddenError(RequestError): pass class UnauthorizedError(RequestError): pass def _get_request_template(name): if name not in _REQUEST_TEMPLATE_NAMES: raise Exception('Invalid request template name: {0}'.format(name)) if name not in _REQUEST_TEMPLATES: path = os.path.join(_REQUEST_TEMPLATE_DIR, '{0}.xml'.format(name)) with open(path) as f: _REQUEST_TEMPLATES[name] = \ _XML_WHITESPACE_PATTERN.sub('><', f.read()).strip() return _REQUEST_TEMPLATES[name] def _get_basic_auth_header(conn_info): authstr = "{0}:{1}".format(conn_info.username, conn_info.password) return 'Basic {0}'.format(base64.encodestring(authstr).strip()) class AuthGSSClient(object): """ The Generic Security Services (GSS) API allows Kerberos implementations to be API compatible. Instances of this class operate on a context for GSSAPI client-side authentication with the given service principal. GSSAPI Function Result Codes: -1 : Error 0 : GSSAPI step continuation (only returned by 'Step' function) 1 : GSSAPI step complete, or function return OK """ def __init__(self, service, conn_info): """ @param service: a string containing the service principal in the form 'type@fqdn' (e.g. 'imap@mail.apple.com'). """ # ZEN-15434 Lazy import. import causes segmentation fault because of # differing versions of the kerberos.so file. Only import here global kerberos if not kerberos: import kerberos self._service = service self._conn_info = conn_info self._username = conn_info.username self._password = conn_info.password self._realm = conn_info.username.split('@')[1].upper() self._dcip = conn_info.dcip self._include_dir = conn_info.include_dir gssflags = kerberos.GSS_C_CONF_FLAG | kerberos.GSS_C_MUTUAL_FLAG | kerberos.GSS_C_SEQUENCE_FLAG | kerberos.GSS_C_INTEG_FLAG os.environ['KRB5CCNAME'] = ccname(conn_info.username) if conn_info.trusted_realm and conn_info.trusted_kdc: add_trusted_realm(conn_info.trusted_realm, conn_info.trusted_kdc) if hasattr(kerberos, 'authGSSClientWrapIov'): result_code, self._context = kerberos.authGSSClientInit(service, gssflags=gssflags) else: result_code, self._context = kerberos.authGSSClientInit(service) if result_code != kerberos.AUTH_GSS_COMPLETE: raise Exception('kerberos authGSSClientInit failed') def __del__(self): if self._context is not None: result_code = kerberos.authGSSClientClean(self._context) if result_code != kerberos.AUTH_GSS_COMPLETE: raise Exception('kerberos authGSSClientClean failed') def _step(self, challenge=''): """ Processes a single GSSAPI client-side step using the supplied server data. @param challenge: a string containing the base64-encoded server data (which may be empty for the first step). @return: a result code """ log.debug('GSSAPI step challenge="{0}"'.format(challenge)) return deferToThread(kerberos.authGSSClientStep, self._context, challenge) @defer.inlineCallbacks def get_base64_client_data(self, challenge=''): """ @return: a string containing the base64-encoded client data to be sent to the server. """ result_code = None for i in xrange(_MAX_KERBEROS_RETRIES): try: result_code = yield self._step(challenge) break except kerberos.GSSError as e: msg = e.args[1][0] if msg == 'Cannot determine realm for numeric host address': raise Exception(msg) elif msg == 'Server not found in Kerberos database': raise Exception(msg + ': ' + self._service) log.debug('{0}. Calling kinit.'.format(msg)) kinit_result = yield kinit(self._username, self._password, self._dcip, includedir=self._include_dir) if kinit_result: # this error is ok. it just means more # than one process is calling kinit if _KRB_INTERNAL_CACHE_ERR not in kinit_result: kinit_result = kinit_result.strip() extra = '' if 'Realm not local to KDC while getting initial credentials' in kinit_result: extra = ' Make sure all KDCs are valid: {}'.format(','.join(config.realms[self._realm])) raise Exception(kinit_result + extra) if result_code != kerberos.AUTH_GSS_CONTINUE: raise Exception('kerberos authGSSClientStep failed ({0}).' .format(result_code)) base64_client_data = kerberos.authGSSClientResponse(self._context) defer.returnValue(base64_client_data) @defer.inlineCallbacks def get_username(self, challenge): """ Get the user name of the principal authenticated via the now complete GSSAPI client-side operations. @param challenge: a string containing the base64-encoded server data @return: a string containing the user name. """ result_code = yield self._step(challenge) if result_code != kerberos.AUTH_GSS_COMPLETE: raise Exception('kerberos authGSSClientStep failed ({0}). ' 'challenge={1}' .format(result_code, challenge)) defer.returnValue(kerberos.authGSSClientUserName(self._context)) def encrypt_body(self, body): # get original length of body. wrap will encrypt in place orig_len = len(body) # encode before sending to wrap func ebody = base64.b64encode(body) # wrap it up try: rc, pad_len = kerberos.authGSSClientWrapIov(self._context, ebody, 1) if rc is not kerberos.AUTH_GSS_COMPLETE: log.debug("Unable to encrypt message body") return except AttributeError: # must be on centos 5, encryption not possible return body except kerberos.GSSError as e: msg = e.args[1][0] raise Exception(msg) # get wrapped request which is in b64 encoding ewrap = kerberos.authGSSClientResponse(self._context) # decode wrapped request payload = bytes(base64.b64decode(ewrap)) # add carriage returns to body body = _BODY.replace('\n', '\r\n') body = bytes(body.format(original_length=orig_len + pad_len, emsg=payload)) return body def decrypt_body(self, body): try: b_start = body.index("Content-Type: application/octet-stream") + \ len("Content-Type: application/octet-stream\r\n") except ValueError: # Unencrypted data, return body return body b_end = body.index("--Encrypted Boundary", b_start) ebody = body[b_start:b_end] ebody = base64.b64encode(ebody) try: rc = kerberos.authGSSClientUnwrapIov(self._context, ebody) except kerberos.GSSError as e: msg = e.args[1][0] raise Exception(msg) if rc is not kerberos.AUTH_GSS_COMPLETE: log.debug("Unable to decrypt message body") return ewrap = kerberos.authGSSClientResponse(self._context) body = base64.b64decode(ewrap) return body def cleanup(self): kerberos.authGSSClientClean(self._context) self._context = None def get_auth_details(auth_header=''): auth_details = '' for field in auth_header.split(','): try: kind, details = field.strip().split(' ', 1) if kind.lower() == 'kerberos': auth_details = details.strip() break except ValueError: continue return auth_details @defer.inlineCallbacks def _authenticate_with_kerberos(conn_info, url, agent, gss_client=None): service = '{0}@{1}'.format(conn_info.service.upper(), conn_info.hostname) if gss_client is None: gss_client = AuthGSSClient( service, conn_info) base64_client_data = yield gss_client.get_base64_client_data() auth = 'Kerberos {0}'.format(base64_client_data) k_headers = Headers(_CONTENT_TYPE) k_headers.addRawHeader('Authorization', auth) k_headers.addRawHeader('Content-Length', '0') response = yield agent.request('POST', url, k_headers, None) auth_header = response.headers.getRawHeaders('WWW-Authenticate')[0] auth_details = get_auth_details(auth_header) if response.code == httplib.UNAUTHORIZED: try: if auth_details: yield gss_client._step(auth_details) except kerberos.GSSError as e: msg = "HTTP Unauthorized received on kerberos initialization. "\ "Kerberos error code {0}: {1}.".format(e.args[1][1], e.args[1][0]) raise Exception(msg) raise UnauthorizedError( "HTTP Unauthorized received on initial kerberos request. Check username and password") elif response.code == httplib.FORBIDDEN: raise ForbiddenError( "Forbidden. Check WinRM port and version.") elif response.code != httplib.OK: proto = _StringProtocol() response.deliverBody(proto) xml_str = yield proto.d xml_str = gss_client.decrypt_body(xml_str) raise Exception( "status code {0} received on initial kerberos request {1}" .format(response.code, xml_str)) if not auth_details: raise Exception( 'negotiate not found in WWW-Authenticate header: {0}' .format(auth_header)) k_username = yield gss_client.get_username(auth_details) log.debug('kerberos auth successful for user: {0} / {1} ' .format(conn_info.username, k_username)) defer.returnValue(gss_client) class ConnectionInfo(namedtuple( 'ConnectionInfo', [ 'hostname', 'auth_type', 'username', 'password', 'scheme', 'port', 'connectiontype', 'keytab', 'dcip', 'timeout', 'trusted_realm', 'trusted_kdc', 'ipaddress', 'service', 'envelope_size', 'code_page', 'locale', 'include_dir'])): def __new__(cls, hostname, auth_type, username, password, scheme, port, connectiontype, keytab, dcip, timeout=60, trusted_realm='', trusted_kdc='', ipaddress='', service='', envelope_size=512000, code_page=65001, locale='en-US', include_dir=None): if not ipaddress: ipaddress = hostname if not service: service = scheme return super(ConnectionInfo, cls).__new__(cls, hostname, auth_type, username, password, scheme, port, connectiontype, keytab, dcip, timeout, trusted_realm, trusted_kdc, ipaddress, service, envelope_size, code_page, locale, include_dir) def verify_include_dir(conn_info): has_include_dir, include_dir = _has_get_attr(conn_info, 'include_dir') if has_include_dir and include_dir: if not os.path.exists(include_dir): raise Exception("includedir must be a valid location") def verify_code_page(conn_info): has_code_page, code_page = _has_get_attr(conn_info, 'code_page') if not has_code_page or not isinstance(code_page, int): raise Exception("code_page must be an integer") def verify_envelope_size(conn_info): has_envelope_size, envelope_size = _has_get_attr(conn_info, 'envelope_size') if not has_envelope_size or not isinstance(envelope_size, int): raise Exception("envelope_size must be an integer") def verify_hostname(conn_info): has_hostname, hostname = _has_get_attr(conn_info, 'hostname') if not has_hostname or not hostname: raise Exception("hostname is not resolvable") def verify_ipaddress(conn_info): has_ipaddress, ipaddress = _has_get_attr(conn_info, 'ipaddress') if not has_ipaddress or not ipaddress: raise Exception("ipaddress missing") def verify_auth_type(conn_info): has_auth_type, auth_type = _has_get_attr(conn_info, 'auth_type') if not has_auth_type or auth_type not in ('basic', 'kerberos'): raise Exception( "auth_type must be basic or kerberos: {0}".format(auth_type)) def verify_username(conn_info): has_username, username = _has_get_attr(conn_info, 'username') if not has_username or not username: raise Exception("username missing") def verify_password(conn_info): has_password, password = _has_get_attr(conn_info, 'password') if not has_password or not password: raise Exception("password missing") def verify_scheme(conn_info): has_scheme, scheme = _has_get_attr(conn_info, 'scheme') if not has_scheme or scheme not in ['http', 'https']: raise Exception( "scheme must be http or https: {0}" .format(scheme)) def verify_service(conn_info): has_service, service = _has_get_attr(conn_info, 'service') if not has_service: # if not supplied, default to scheme has_service, service = _has_get_attr(conn_info, 'scheme') if not has_service or service not in ['http', 'https', 'wsman']: raise Exception( "service must be http, https, or wsman: {0}" .format(service)) def verify_port(conn_info): has_port, port = _has_get_attr(conn_info, 'port') if not has_port or not port or not isinstance(port, int): raise Exception("illegal value for port: {0}".format(port)) def verify_connectiontype(conn_info): has_connectiontype, connectiontype = _has_get_attr(conn_info, 'connectiontype') if not has_connectiontype or not connectiontype: raise Exception("connectiontype missing") def verify_timeout(conn_info): has_timeout, timeout = _has_get_attr(conn_info, 'timeout') if not has_timeout: raise Exception("timeout missing") if not timeout: conn_info.timeout = 60 def verify_conn_info(conn_info): verify_hostname(conn_info) verify_ipaddress(conn_info) verify_auth_type(conn_info) verify_username(conn_info) verify_password(conn_info) verify_scheme(conn_info) verify_port(conn_info) verify_connectiontype(conn_info) verify_timeout(conn_info) verify_include_dir(conn_info) class RequestSender(object): def __init__(self, conn_info): verify_conn_info(conn_info) self._conn_info = conn_info self._url = None self._headers = None self.gssclient = None self.agent = _get_agent() self.authorized = False @defer.inlineCallbacks def _get_url_and_headers(self): url = "{c.scheme}://{c.ipaddress}:{c.port}/wsman".format(c=self._conn_info) if self._conn_info.auth_type == 'basic': headers = Headers(_CONTENT_TYPE) headers.addRawHeader('Connection', self._conn_info.connectiontype) if not self.authorized: headers.addRawHeader( 'Authorization', _get_basic_auth_header(self._conn_info)) self.authorized = True elif self.is_kerberos(): headers = Headers(_ENCRYPTED_CONTENT_TYPE) headers.addRawHeader('Connection', self._conn_info.connectiontype) if self.gssclient is None: self.gssclient = yield _authenticate_with_kerberos(self._conn_info, url, self.agent) else: raise Exception('unknown auth type: {0}'.format(self._conn_info.auth_type)) defer.returnValue((url, headers)) @defer.inlineCallbacks def _set_url_and_headers(self): self._url, self._headers = yield self._get_url_and_headers() @property def hostname(self): return self._conn_info.hostname def is_kerberos(self): return self._conn_info.auth_type == 'kerberos' def decrypt_body(self, body): return self.gssclient.decrypt_body(body) @defer.inlineCallbacks def send_request(self, request_template_name, **kwargs): log.debug('sending request: {0} {1}'.format( request_template_name, kwargs)) kwargs['envelope_size'] = getattr(self._conn_info, 'envelope_size', 512000) kwargs['locale'] = getattr(self._conn_info, 'locale', 'en-US') kwargs['code_page'] = getattr(self._conn_info, 'code_page', 65001) if not self._url or self._conn_info.auth_type == 'kerberos': yield self._set_url_and_headers() request = _get_request_template(request_template_name).format(**kwargs) if self.is_kerberos(): encrypted_request = self.gssclient.encrypt_body(request) if not encrypted_request.startswith("--Encrypted Boundary"): self._headers.setRawHeaders('Content-Type', _CONTENT_TYPE['Content-Type']) body_producer = _StringProducer(encrypted_request) else: body_producer = _StringProducer(request) try: response = yield self.agent.request( 'POST', self._url, self._headers, body_producer) except Exception as e: raise e log.debug('received response {0} {1}'.format( response.code, request_template_name)) if response.code == httplib.UNAUTHORIZED or response.code == httplib.BAD_REQUEST: # check to see if we need to re-authorize due to lost connection or bad request error if self.gssclient is not None: self.agent = _get_agent() # do some cleanup first. memory leaks were occurring self.gssclient.cleanup() self.gssclient = None try: yield self._set_url_and_headers() encrypted_request = self.gssclient.encrypt_body(request) if not encrypted_request.startswith("--Encrypted Boundary"): self._headers.setRawHeaders('Content-Type', _CONTENT_TYPE['Content-Type']) body_producer = _StringProducer(encrypted_request) response = yield self.agent.request( 'POST', self._url, self._headers, body_producer) except Exception as e: raise e if response.code == httplib.UNAUTHORIZED: if self.is_kerberos(): auth_header = response.headers.getRawHeaders('WWW-Authenticate')[0] auth_details = get_auth_details(auth_header) try: if auth_details: yield self.gssclient._step(auth_details) except kerberos.GSSError as e: msg ="HTTP Unauthorized received. "\ "Kerberos error code {0}: {1}.".format(e.args[1][1],e.args[1][0]) raise Exception(msg) raise UnauthorizedError( "HTTP Unauthorized received: Check username and password") if response.code == httplib.FORBIDDEN: raise ForbiddenError( "Forbidden: Check WinRM port and version") elif response.code != httplib.OK: if self.is_kerberos(): reader = _ErrorReader(self.gssclient) else: reader = _ErrorReader() response.deliverBody(reader) message = yield reader.d raise RequestError("HTTP status: {0}. {1}".format( response.code, message)) defer.returnValue(response) def close_connections(self): # close connections # return a Deferred() if self.agent and hasattr(self.agent, 'closeCachedConnections'): # twisted 11 has no return and is part of the Agent return defer.succeed(self.agent.closeCachedConnections()) elif self.agent: # twisted 12 returns a Deferred return self.agent._pool.closeCachedConnections() else: # no agent return defer.succeed(None) class _StringProtocol(Protocol): def __init__(self): self.d = defer.Deferred() self._data = [] def dataReceived(self, data): self._data.append(data) def connectionLost(self, reason): self.d.callback(''.join(self._data)) class EtreeRequestSender(object): """A request sender that returns an etree element""" def __init__(self, sender): self._sender = sender @defer.inlineCallbacks def send_request(self, request_template_name, **kwargs): resp = yield self._sender.send_request( request_template_name, **kwargs) proto = _StringProtocol() resp.deliverBody(proto) body = yield proto.d if self._sender.is_kerberos(): xml_str = self._sender.gssclient.decrypt_body(body) else: xml_str = yield body if log.isEnabledFor(logging.DEBUG): try: import xml.dom.minidom xml = xml.dom.minidom.parseString(xml_str) log.debug(xml.toprettyxml()) except: log.debug('Could not prettify response XML: "{0}"'.format(xml_str)) defer.returnValue(ET.fromstring(xml_str)) @defer.inlineCallbacks def close_connections(self): closed = yield self._sender.close_connections() defer.returnValue(closed) def create_etree_request_sender(conn_info): sender = RequestSender(conn_info) return EtreeRequestSender(sender) TZOFFSET_PATTERN = re.compile(r'[-+]\d+:\d\d$') def get_datetime(text): """ Parse the date from a WinRM response and return a datetime object. """ text2 = TZOFFSET_PATTERN.sub('Z', text) if text2.endswith('Z'): if '.' in text2: format = "%Y-%m-%dT%H:%M:%S.%fZ" date_string = _NANOSECONDS_PATTERN.sub(r'.\g<1>', text2) else: format = "%Y-%m-%dT%H:%M:%SZ" date_string = text2 else: format = '%m/%d/%Y %H:%M:%S.%f' date_string = text2 return datetime.strptime(date_string, format) txwinrm-1.2.7/txwinrm/wecutil.py000066400000000000000000000100671305406262000167710ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import sys import logging from collections import namedtuple from twisted.internet import defer, task, reactor from . import app from .subscribe import create_event_subscription log = logging.getLogger('winrm') SubscriptionInfo = namedtuple('SubscriptionInfo', ['path', 'select']) def subscription_info_repr(self): return "{0.path}/'{0.select}'".format(self) SubscriptionInfo.__repr__ = subscription_info_repr class SubscriptionInfoBuilder(object): def __init__(self, path=None, select=None): self.path = path self.select = select def build(self): return SubscriptionInfo(self.path, self.select) class WecutilStrategy(object): def __init__(self): self._event_count = 0 self._d = defer.Deferred() self._subscriptions_dct = {} @property def count_summary(self): return '{0} events'.format(self._event_count) @defer.inlineCallbacks def _do_pull( self, i, num_pulls, hostname, subscr_info): prefix = "{0} {1}".format(hostname, subscr_info) subscription = self._subscriptions_dct[(hostname, subscr_info)] if num_pulls > 0 and i == num_pulls: yield subscription.unsubscribe() del self._subscriptions_dct[(hostname, subscr_info)] if not self._subscriptions_dct: self._d.callback(None) return i += 1 sys.stdout.write('{0} pull #{1}'.format(prefix, i)) if num_pulls > 0: sys.stdout.write(' of {0}'.format(num_pulls)) print def print_event(event): self._event_count += 1 print "{0} {1}".format(prefix, event) log.debug("subscription.pull- {0} {1} (start)" .format(hostname, subscr_info)) yield subscription.pull(print_event) log.debug("subscription.pull- {0} {1} (finished)" .format(hostname, subscr_info)) task.deferLater(reactor, 0, self._do_pull, i, num_pulls, hostname, subscr_info) @defer.inlineCallbacks def act(self, good_conn_infos, args, config): for conn_info in good_conn_infos: hostname = conn_info.hostname for subscr_info in config.subscr_infos: subscription = create_event_subscription(conn_info) self._subscriptions_dct[(hostname, subscr_info)] = subscription yield subscription.subscribe( subscr_info.path, subscr_info.select) self._do_pull(0, args.num_pulls, hostname, subscr_info) yield self._d class WecUtility(app.ConfigDrivenUtility): def add_args(self, parser): parser.add_argument("--path", "-p", default='Application') parser.add_argument("--select", "-s", default='*') parser.add_argument("--num-pulls", "-n", type=int, default=2) def check_args(self, args): return True def add_config(self, parser, config): subscr_info_builders_dct = {} for key, value in parser.items('subscriptions'): k1, k2 = key.split('.') if k2 not in ['path', 'select']: log.error("Illegal subscription key: {0}".format(key)) continue if k1 not in subscr_info_builders_dct: subscr_info_builders_dct[k1] = SubscriptionInfoBuilder() setattr(subscr_info_builders_dct[k1], k2, value) config.subscr_infos = [] for subscr_info_builder in subscr_info_builders_dct.values(): config.subscr_infos.append(subscr_info_builder.build()) def adapt_args_to_config(self, args, config): config.subscr_infos = [SubscriptionInfo(args.path, args.select)] if __name__ == '__main__': app.main(WecUtility(WecutilStrategy())) txwinrm-1.2.7/txwinrm/winrm.py000066400000000000000000000047001305406262000164460ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## """ Use twisted web client to enumerate/pull WQL query. """ import sys from twisted.internet import defer from . import app from .WinRMClient import EnumerateClient class WinrmStrategy(object): def __init__(self): self._item_count = 0 @property def count_summary(self): return '{0} items'.format(self._item_count) def _print_items(self, items, hostname, wql, include_header): if include_header: print '\n', hostname, "==>", wql indent = ' ' else: indent = '' is_first_item = True for item in items: if is_first_item: is_first_item = False else: print '{0}{1}'.format(indent, '-' * 4) for name, value in vars(item).iteritems(): self._item_count += 1 text = value if isinstance(value, list): text = ', '.join(value) print '{0}{1} = {2}'.format(indent, name, text) def act(self, good_conn_infos, args, config): include_header = len(config.conn_infos) > 1 ds = [] for conn_info in good_conn_infos: client = EnumerateClient(conn_info) for wql in config.wqls: d = client.enumerate(wql) d.addCallback( self._print_items, conn_info.hostname, wql, include_header) ds.append(d) return defer.DeferredList(ds, consumeErrors=True) class WinrmUtility(app.ConfigDrivenUtility): def add_args(self, parser): parser.add_argument("--filter", "-f") def check_args(self, args): legit = args.config or args.filter if not legit: print >>sys.stderr, "ERROR: You must specify a config file with " \ "-c or specify a WQL filter with -f" return legit def add_config(self, parser, config): config.wqls = parser.options('wqls') def adapt_args_to_config(self, args, config): config.wqls = [args.filter] if __name__ == '__main__': app.main(WinrmUtility(WinrmStrategy())) txwinrm-1.2.7/txwinrm/winrs.py000066400000000000000000000104621305406262000164560ustar00rootroot00000000000000############################################################################## # # Copyright (C) Zenoss, Inc. 2013, all rights reserved. # # This content is made available according to terms specified in the LICENSE # file at the top-level directory of this package. # ############################################################################## import sys import cmd from pprint import pprint from twisted.internet import reactor, defer, task, threads from . import app from .shell import create_remote_shell from .WinRMClient import SingleCommandClient, LongCommandClient def print_output(stdout, stderr): for line in stdout: print ' ', line for line in stderr: print >>sys.stderr, ' ', line class WinrsCmd(cmd.Cmd): def __init__(self, shell): cmd.Cmd.__init__(self) self._shell = shell self.prompt = shell.prompt def default(self, line): response = threads.blockingCallFromThread( reactor, self._run_command, line) print '\n'.join(response.stdout) print >>sys.stderr, '\n'.join(response.stderr) @defer.inlineCallbacks def _run_command(self, line): response = yield self._shell.run_command(line) defer.returnValue(response) def do_exit(self, line): reactor.callFromThread(self._exit) return True @defer.inlineCallbacks def _exit(self): yield self._shell.delete() app.stop_reactor() def postloop(self): print @defer.inlineCallbacks def long_running_main(args): try: client = LongCommandClient(args.conn_info) yield client.start(args.command) for i in xrange(5): stdout, stderr = yield task.deferLater( reactor, 1, client.receive) print_output(stdout, stderr) yield client.stop() finally: app.stop_reactor() @defer.inlineCallbacks def interactive_main(args): shell = create_remote_shell(args.conn_info) response = yield shell.create() intro = '\n'.join(response.stdout) winrs_cmd = WinrsCmd(shell) reactor.callInThread(winrs_cmd.cmdloop, intro) @defer.inlineCallbacks def batch_main(args): hostname = args.conn_info.hostname command = args.command try: shell = create_remote_shell(args.conn_info) print 'Creating shell on {0}.'.format(hostname) yield shell.create() for i in range(10): print '\nSending to {0}:\n {1}'.format(hostname, command) response = yield shell.run_command(command) print '\nReceived from {0}:'.format(hostname) print_output(response.stdout, response.stderr) response = yield shell.delete() print "\nDeleted shell on {0}.".format(hostname) print_output(response.stdout, response.stderr) print "\nExit code of shell on {0}: {1}".format( hostname, response.exit_code) finally: app.stop_reactor() @defer.inlineCallbacks def single_shot_main(args): try: client = SingleCommandClient(args.conn_info) results = yield client.run_command(args.command) pprint(results) finally: app.stop_reactor() class WinrsUtility(object): def tx_main(self, args, config): if args.kind == "long": long_running_main(args) elif args.kind == "single": single_shot_main(args) elif args.kind == "batch": batch_main(args) else: interactive_main(args) def add_args(self, parser): parser.add_argument( "kind", nargs='?', default="interactive", choices=["interactive", "single", "batch", "long", "multiple"]) parser.add_argument("--command", "-x") def check_args(self, args): if not args.command and args.kind in ["single", "batch", "long", "multiple"]: print >>sys.stderr, \ "ERROR: {0} requires that you specify a command." return False elif args.config: print >>sys.stderr, \ "ERROR: The winrs command does not support a configuration " \ "file at this time." return False return True def add_config(self, parser, config): pass def adapt_args_to_config(self, args, config): pass if __name__ == '__main__': app.main(WinrsUtility())