Daniel

@lodos2005 I want to contribute a PR that connects to the EVEN6 RPC interface over SMB `\PIPE\eventlog` instead of the high TCP port, but over SMB `EvtRpcRegisterLogQuery()` fails with `rpc_s_access_denied`...

@NeffIsBack yes, I built a standalone reproducer: https://gist.github.com/dadevel/d4e8906424278f65d0cf8b9bf3aea906

Thanks for testing! Can you try with `--protocol smb`? The script uses RPC over TCP by default (I probably should've changed that).

Windows is weird. At least I know now that it wasn't me :D Thank you again for helping out.

For anybody who wants to play around with this PR: Setup WinRMS. ~~~ powershell New-SelfSignedCertificate -Subject 'CN=dc01.corp.local' -TextExtension '2.5.29.37={text}1.3.6.1.5.5.7.3.1'c winrm create 'winrm/config/Listener?Address=*+Transport=HTTPS' '@{Hostname="dc01.corp.local"; CertificateThumbprint="9592A6D026E71AFFA17049D16D74AA7C47A89788"}' New-NetFirewallRule -DisplayName 'WinRM HTTPS' -Direction 'Inbound'...

I'm not sure what you are trying to say, but maybe check out `mssql-spray hashes --help`?