Skip to main content

Getting Started with Illumio Insights

Port 593 - HTTP RPC EPMAP (TCP/UDP)

Severity: Medium | Category: Admin

  • T1210 - Exploitation of Remote Services [Lateral Movement] Same RPC vulns as 135 tunneled through HTTP, bypassing firewalls

  • T1021 - Remote Services [Lateral Movement] DCOM/WMI tunneled through HTTP for lateral movement