# # File: bzar_dce-rpc_consts.zeek # Created: 20180701 # Updated: 20201009 # # Copyright 2018 The MITRE Corporation. All Rights Reserved. # Approved for public release. Distribution unlimited. Case number 18-3868. # module BZAR; export { # ATT&CK - Credential Access Techniques # # Windows DCE-RPC functions (endpoint::operation) used for # Credential Access on the remote system # # Relevant ATT&CK Technique(s): # T1003.006 OS Credential Dumping: DCSync const t1003_006_rpc_strings : set[string] = { # T1003.006 OS Credential Dumping: DCSync "drsuapi::DRSReplicaSync", "drsuapi::DRSGetNCChanges", } &redef; # ATT&CK - Defense Evasion Techniques # # Windows DCE-RPC functions (endpoint::operation) used for # Defense Evasion on the remote system # # Relevant ATT&CK Technique(s): # T1070.001 Indicator Removal on Host: Clear Windows Event Logs const t1070_001_rpc_strings : set[string] = { # T1070.001 Indicator Removal on Host # Clear Event Logs "eventlog::ElfrClearELFW", "eventlog::ElfrClearELFA", "IEventService::EvtRpcClearLog", } &redef; # ATT&CK - Execution Techniques # # Windows DCE-RPC functions (endpoint::operation) used for # Execution on the remote system # # Relevant ATT&CK Technique(s): # T1569.002 System Services: Service Execution # T1047 Windows Management Instrumentation # T1053.002 Scheduled Task/Job: At # T1053.005 Scheduled Task/Job: Scheduled Task const t1569_002_rpc_strings : set[string] = { # T1569.002 System Services: Service Execution "svcctl::CreateServiceWOW64W", "svcctl::CreateServiceWOW64A", "svcctl::CreateServiceW", "svcctl::CreateServiceA", "svcctl::StartServiceW", "svcctl::StartServiceA", } &redef; const t1047_rpc_strings : set[string] = { # T1047 Windows Management Instrumentation "IWbemServices::ExecMethod", "IWbemServices::ExecMethodAsync", } &redef; const t1053_002_rpc_strings : set[string] = { # T1053.002 Scheduled Task/Job: At "atsvc::JobAdd", } &redef; const t1053_005_rpc_strings : set[string] = { # T1053.005 Scheduled Task/Job: Scheduled Task "ITaskSchedulerService::SchRpcRegisterTask", "ITaskSchedulerService::SchRpcRun", "ITaskSchedulerService::SchRpcEnableTask", } &redef; # ATT&CK - Impact Techniques # # Windows DCE-RPC functions (endpoint::operation) used for # Impact on the remote system # # Relevant ATT&CK Technique(s): # T1529 System Shutdown/Reboot const t1529_rpc_strings : set[string] = { # T1529 System Shutdown/Reboot "winreg::BaseInitiateSystemShutdown", "winreg::BaseInitiateSystemShutdownEx", "InitShutdown::BaseInitiateShutdown", "InitShutdown::BaseInitiateShutdownEx", "WindowsShutdown::WsdrInitiateShutdown", "winstation_rpc::RpcWinStationShutdownSystem", "samr::SamrShutdownSamServer", # MSDN says not used on the wire } &redef; # ATT&CK - Persistence Techniques # # Windows DCE-RPC functions (endpoint::operation) used for # Persistence on the remote system # # Relevant ATT&CK Technique(s): # T1547.004 Boot or Logon Autostart Execution: Winlogon Helper DLL # T1547.010 Boot or Logon Autostart Execution: Port Monitors const t1547_004_rpc_strings : set[string] = { # T1547.004 Boot or Logon Autostart Execution: Winlogon Helper DLL "ISecLogon::SeclCreateProcessWithLogonW", "ISecLogon::SeclCreateProcessWithLogonExW", } &redef; const t1547_010_rpc_strings : set[string] = { # T1547.010 Boot or Logon Autostart Execution: Port Monitors "spoolss::RpcAddMonitor", # aka winspool | spoolss "spoolss::RpcAddPrintProcessor", # aka winspool | spool "IRemoteWinspool::RpcAsyncAddMonitor", "IRemoteWinspool::RpcAsyncAddPrintProcessor", } &redef; # ATT&CK - Discovery Techniques # # Windows DCE-RPC functions (endpoint::operation) used for # Discovery of users, hosts, files, shares, networks, time # # Relevant ATT&CK Technique(s): # T1016 System Network Configuration Discovery # T1018 Remote System Discovery # T1033 System Owner/User Discovery # T1049 System Network Connections Discovery # T1069 Permission Groups Discovery # T1082 System Information Discovery # T1083 File & Directory Discovery # T1087 Account Discovery # T1124 System Time Discovery # T1135 Network Share Discovery const t1016_rpc_strings : set[string] = { # T1016 System Network Configuration Discovery "srvsvc::NetrServerTransportEnum", "wkssvc::NetrWkstaTransportEnum", } &redef; const t1018_rpc_strings : set[string] = { # T1018 Remote System Discovery "srvsvc::NetrServerGetInfo", "srvsvc::NetrServerAliasEnum", "wkssvc::NetrWkstaGetInfo", } &redef; const t1033_rpc_strings : set[string] = { # T1033 System Owner/User Discovery "lsarpc::LsarGetUserName", "lsarpc::LsarEnumerateTrustedDomainsEx", "lsarpc::LsarGetSystemAccessAccount", "lsarpc::LsarQueryDomainInformationPolicy", "lsarpc::LsarQueryInfoTrustedDomain", "samr::SamrEnumerateGroupsInDomain", "samr::SamrEnumerateDomainsInSamServer", "samr::SamrQueryInformationDomain", "samr::SamrQueryInformationDomain2", "samr::SamrQueryInformationGroup", } &redef; const t1049_rpc_strings : set[string] = { # T1049 System Network Connections Discovery "srvsvc::NetrConnectionEnum", "srvsvc::NetrSessionEnum", } &redef; const t1069_rpc_strings : set[string] = { # T1069 Permission Groups Discovery "lsarpc::LsarEnumerateAccountRights", "lsarpc::LsarEnumerateAccountsWithUserRight", "lsarpc::LsarEnumeratePrivileges", "lsarpc::LsarEnumeratePrivilegesAccount", "lsarpc::LsarLookupPrivilegeValue", "lsarpc::LsarLookupPrivilegeName", "lsarpc::LsarLookupPrivilegeDisplayName", "samr::SamrGetGroupsForUser", "samr::SamrGetAliasMembership", "samr::SamrGetMembersInAlias", "samr::SamrGetMembersInGroup", } &redef; const t1082_rpc_strings : set[string] = { # T1082 System Information Discovery "lsarpc::LsarQueryInformationPolicy", "lsarpc::LsarQueryInformationPolicy2", "lsarpc::LsarQueryTrustedDomainInfo", "lsarpc::LsarQueryTrustedDomainInfoByName", "samr::SamrGetUserDomainPasswordInformation", } &redef; const t1083_rpc_strings : set[string] = { # T1083 File & Directory Discovery "srvsvc::NetrFileEnum", } &redef; const t1087_rpc_strings : set[string] = { # T1087 Account Discovery "lsarpc::LsarEnumerateAccounts", "lsarpc::LsarLookupNames", "lsarpc::LsarLookupNames2", "lsarpc::LsarLookupNames3", "lsarpc::LsarLookupNames4", "lsarpc::LsarLookupSids", "lsarpc::LsarLookupSids2", "lsarpc::LsarLookupSids3", "samr::SamrEnumerateAliasesInDomain", "samr::SamrEnumerateUsersInDomain", "samr::SamrLookupNamesInDomain", "samr::SamrLookupIdsInDomain", "samr::SamrLookupDomainInSamServer", "samr::SamrQueryDisplayInformation", "samr::SamrQueryDisplayInformation2", "samr::SamrQueryDisplayInformation3", "samr::SamrQueryInformationAlias", "samr::SamrQueryInformationUser", "samr::SamrQueryInformationUser2", "wkssvc::NetrWkstaUserEnum", } &redef; const t1124_rpc_strings : set[string] = { # T1124 System Time Discovery "srvsvc::NetrRemoteTOD", } &redef; const t1135_rpc_strings : set[string] = { # T1135 Network Share Discovery "srvsvc::NetrShareEnum", "srvsvc::NetrShareGetInfo", } &redef; # Microsoft DCE-RPC Interface UUIDs (aka "endpoints") -- 144 more -- # to add to Bro DCE_RPC::uuid_endpoint_map. # # References: # MSDN Library > Open Specifications > Protocols > Windows Protocols > Technical Documents # https://msdn.microsoft.com/en-us/library/jj712081.aspx redef DCE_RPC::uuid_endpoint_map += { ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7"] = "authzr", ["e3d0d746-d2af-40fd-8a7a-0d7078bb7092"] = "BitsPeerAuth", ["b97db8b2-4c63-11cf-bff6-08002be23f2f"] = "clusapi", ["d61a27c6-8f53-11d0-bfa0-00a024151983"] = "CNtmsSvr", ["6bffd098-a112-3610-9833-46c3f874532d"] = "dhcpsrv", ["5b821720-f63b-11d0-aad2-00c04fc324db"] = "dhcpsrv2", ["8f09f000-b7ed-11ce-bbd2-00001a181cad"] = "dimsvc", ["7c44d7d4-31d5-424c-bd5e-2b3e1f323d22"] = "dsaop", ["77df7a80-f298-11d0-8358-00a024c480a8"] = "dscomm", ["708cca10-9569-11d1-b2a5-0060977d8118"] = "dscomm2", ["df1941c5-fe89-4e79-bf10-463657acf44d"] = "efsrpc", ["c681d488-d850-11d0-8c52-00c04fd90f7e"] = "efsrpc2", ["ea0a3165-4834-11d2-a6f8-00c04fa346cc"] = "fax", ["6099fc12-3eff-11d0-abd0-00c04fd91a4e"] = "faxclient", ["a8e0653c-2744-4389-a61d-7373df8b2292"] = "FileServerVssAgent", ["897e2e5f-93f3-4376-9c9c-fd2277495c27"] = "FrsTransport", ["4bb8ab1d-9ef9-4100-8eb6-dd4b4e418b72"] = "IADProxy", ["c4b0c7d9-abe0-4733-a1e1-9fdedf260c7a"] = "IADProxy2", ["03837516-098b-11d8-9414-505054503030"] = "IAlertDataCollector", ["0383751a-098b-11d8-9414-505054503030"] = "IApiTracingDataCollector", ["d99e6e71-fc88-11d0-b498-00a0c90312f3"] = "ICertAdminD", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd"] = "ICertAdminD2", ["d99e6e70-fc88-11d0-b498-00a0c90312f3"] = "ICertRequestD", ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90"] = "ICertRequestD2", ["879c8bbe-41b0-11d1-be11-00c04fb6bf70"] = "IClientSink", ["03837514-098b-11d8-9414-505054503030"] = "IConfigurationDataCollector", ["038374ff-098b-11d8-9414-505054503030"] = "IDataCollector", ["03837502-098b-11d8-9414-505054503030"] = "IDataCollectorCollection", ["03837520-098b-11d8-9414-505054503030"] = "IDataCollectorSet", ["03837524-098b-11d8-9414-505054503030"] = "IDataCollectorSetCollection", ["03837541-098b-11d8-9414-505054503030"] = "IDataManager", ["00020400-0000-0000-c000-000000000046"] = "IDispatch", ["d2d79df7-3400-11d0-b40b-00aa005ff586"] = "IDMNotify", ["3a410f21-553f-11d1-8e5e-00a0c92c9d5d"] = "IDMRemoteServer", ["00020404-0000-0000-c000-000000000046"] = "IEnumVARIANT", ["027947e1-d731-11ce-a357-000000000001"] = "IEnumWbemClassObject", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c"] = "IEventService", ["03837543-098b-11d8-9414-505054503030"] = "IFolderAction", ["03837544-098b-11d8-9414-505054503030"] = "IFolderActionCollection", ["7c4e1804-e342-483d-a43e-a850cfcc8d18"] = "IIISApplicationAdmin", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2"] = "IIISCertObj", ["e8fb8620-588f-11d2-9d61-00c04f79c5fe"] = "IIisServiceControl", ["c3fcc19e-a970-11d2-8b5a-00a0c9b7c9c4"] = "IManagedObject", ["034634fd-ba3f-11d1-856a-00a0c944138c"] = "IManageTelnetSessions", ["081e7188-c080-4ff3-9238-29f66d6cabfd"] = "IMessenger", ["8298d101-f992-43b7-8eca-5052d885b995"] = "IMSAdminBase2W", ["f612954d-3b0b-4c56-9563-227b7be624b4"] = "IMSAdminBase3W", ["70b51430-b6ca-11d0-b9b9-00a0c922e750"] = "IMSAdminBaseW", ["82ad4280-036b-11cf-972c-00aa006887b0"] = "inetinfo", ["4e934f30-341a-11d1-8fb1-00a024cb6019"] = "INtmsLibraryControl1", ["db90832f-6910-4d46-9f5e-9fd6bfa73903"] = "INtmsLibraryControl2", ["d02e4be0-3419-11d1-8fb1-00a024cb6019"] = "INtmsMediaServices1", ["bb39332c-bfee-4380-ad8a-badc8aff5bb6"] = "INtmsNotifySink", ["69ab7050-3059-11d1-8faf-00a024cb6019"] = "INtmsObjectInfo1", ["b057dc50-3059-11d1-8faf-00a024cb6019"] = "INtmsObjectManagement1", ["895a2c86-270d-489d-a6c0-dc2a9b35280e"] = "INtmsObjectManagement2", ["3bbed8d9-2c9a-4b21-8936-acb2f995be6c"] = "INtmsObjectManagement3", ["8da03f40-3419-11d1-8fb1-00a024cb6019"] = "INtmsSession1", ["784b693d-95f3-420b-8126-365c098659f2"] = "IOCSPAdminD", ["833e4100-aff7-4ac3-aac2-9f24c1457bce"] = "IPCHCollection", ["833e4200-aff7-4ac3-aac2-9f24c1457bce"] = "IPCHService", ["03837506-098b-11d8-9414-505054503030"] = "IPerformanceCounterDataCollector", ["f120a684-b926-447f-9df4-c966cb785648"] = "IRASrv", ["6619a740-8154-43be-a186-0319578e02db"] = "IRemoteDispatch", ["66a2db22-d706-11d0-a37b-00c04fc9da04"] = "IRemoteICFICSConfig", ["6139d8a4-e508-4ebb-bac7-d7f275145897"] = "IRemoteIPV6Config", ["66a2db1b-d706-11d0-a37b-00c04fc9da04"] = "IRemoteNetworkConfig", ["66a2db20-d706-11d0-a37b-00c04fc9da04"] = "IRemoteRouterRestart", ["66a2db21-d706-11d0-a37b-00c04fc9da04"] = "IRemoteSetDnsConfig", ["5ff9bdf6-bd91-4d8b-a614-d6317acc8dd8"] = "IRemoteSstpCertCheck", ["67e08fc2-2984-4b62-b92e-fc1aae64bbbb"] = "IRemoteStringIdConfig", ["00000131-0000-0000-c000-000000000046"] = "IRemUnknown", ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4"] = "IResourceManager", ["2a3eb639-d134-422d-90d8-aaa1b5216202"] = "IResourceManager2", ["7d07f313-a53f-459a-bb12-012c15b1846e"] = "IRobustNtmsMediaServices1", ["833e41aa-aff7-4ac3-aac2-9f24c1457bce"] = "ISAFSession", ["0383753a-098b-11d8-9414-505054503030"] = "ISchedule", ["0383753d-098b-11d8-9414-505054503030"] = "IScheduleCollection", ["b9785960-524f-11df-8b6d-83dcded72085"] = "ISDKey", ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce"] = "IServerHealthReport", ["20d15747-6c48-4254-a358-65039fd8c63c"] = "IServerHealthReport2", ["8165b19e-8d3a-4d0b-80c8-97de310db583"] = "IServicedComponentInfo", ["112b1dff-d9dc-41f7-869f-d67fee7cb591"] = "ITpmVirtualSmartCardManager", ["fdf8a2b9-02de-47f4-bc26-aa85ab5e5267"] = "ITpmVirtualSmartCardManager2", ["3c745a97-f375-4150-be17-5950f694c699"] = "ITpmVirtualSmartCardManager3", ["1a1bb35f-abb8-451c-a1ae-33d98f1bef4a"] = "ITpmVirtualSmartCardManagerStatusCallback", ["0383750b-098b-11d8-9414-505054503030"] = "ITraceDataCollector", ["03837512-098b-11d8-9414-505054503030"] = "ITraceDataProvider", ["03837510-098b-11d8-9414-505054503030"] = "ITraceDataProviderCollection", ["00020403-0000-0000-c000-000000000046"] = "ITypeComp", ["00020401-0000-0000-c000-000000000046"] = "ITypeInfo", ["00020412-0000-0000-c000-000000000046"] = "ITypeInfo2", ["00020402-0000-0000-c000-000000000046"] = "ITypeLib", ["00020411-0000-0000-c000-000000000046"] = "ITypeLib2", ["00000000-0000-0000-c000-000000000046"] = "IUnknown", ["03837534-098b-11d8-9414-505054503030"] = "IValueMap", ["03837533-098b-11d8-9414-505054503030"] = "IValueMapItem", ["d2d79df5-3400-11d0-b40b-00aa005ff586"] = "IVolumeClient", ["4bdafc52-fe6a-11d2-93f8-00105a11164a"] = "IVolumeClient2", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61"] = "IVolumeClient3", ["deb01010-3a37-4d26-99df-e2bb6ae3ac61"] = "IVolumeClient4", ["214a0f28-b737-4026-b847-4f9e37d79529"] = "IVssDifferentialSoftwareSnapshotMgmt", ["01954e6b-9254-4e6e-808c-c9e05d007696"] = "IVssEnumMgmtObject", ["ae1c7110-2f60-11d3-8a39-00c04f72d8e3"] = "IVssEnumObject", ["fa7df749-66e7-4986-a27f-e2f04ae53772"] = "IVssSnapshotMgmt", ["29822ab7-f302-11d0-9953-00c04fd919c1"] = "IWamAdmin", ["29822ab8-f302-11d0-9953-00c04fd919c1"] = "IWamAdmin2", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d"] = "IWRMAccounting", ["481e06cf-ab04-4498-8ffe-124a0a34296d"] = "IWRMCalendar", ["21546ae8-4da5-445e-987f-627fea39c5e8"] = "IWRMConfig", ["943991a5-b3fe-41fa-9696-7f7b656ee34b"] = "IWRMMachineGroup", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15"] = "IWRMPolicy", ["f31931a9-832d-481c-9503-887a0e6a79f0"] = "IWRMProtocol", ["fc910418-55ca-45ef-b264-83d4ce7d30e0"] = "IWRMRemoteSessionMgmt", ["bc681469-9dd9-4bf4-9b3d-709f69efe431"] = "IWRMResourceGroup", ["e33c0cc4-0482-101a-bc0c-02608c6ba218"] = "locator", ["afc07e2e-311c-4435-808c-c483ffeec7c9"] = "lsacap", ["22e5386d-8b12-4bf0-b0ec-6a1ea419e366"] = "NetEventForwarder", ["d049b186-814f-11d1-9a3c-00c04fc9b232"] = "NtFrsApi", ["da5a86c5-12c2-4943-ab30-7f74a813d853"] = "PerflibV2", ["1088a980-eae5-11d0-8d9b-00a02453c337"] = "qm2qm", ["fdb3a030-065f-11d1-bb9b-00a024ea5525"] = "qmcomm", ["76d12b80-3467-11d3-91ff-0090272f9ea3"] = "qmcomm2", ["41208ee0-e970-11d1-9b9e-00e02c064c39"] = "qmmgmt", ["20610036-fa22-11cf-9823-00a0c911e5df"] = "rasrpc", ["497d95a6-2d27-4bf5-9bbd-a6046957133c"] = "RCMListener", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe"] = "RCMPublic", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48"] = "RemoteFW", ["1a9134dd-7b39-45ba-ad88-44d01ca47f28"] = "RemoteRead", ["2f5f6521-ca47-1068-b319-00dd010662db"] = "remotesp", ["1257b580-ce2f-4109-82d6-a9459d0bf6bc"] = "SessEnvPublicRpc", ["4b112204-0e19-11d3-b42b-0000f81feb9f"] = "ssdpsrv", ["2f5f6520-ca46-1067-b319-00dd010662da"] = "tapsrv", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390"] = "TermServEnumeration", ["11899a43-2b68-4a76-92e3-a3d6ad8c26ce"] = "TermServNotification", ["484809d6-4239-471b-b5bc-61df8c23ac48"] = "TermSrvSession", ["4da1c422-943d-11d1-acae-00c04fc2aa3f"] = "trksvr", ["300f3532-38cc-11d0-a3f0-0020af6b0add"] = "trkwks", ["44e265dd-7daf-42cd-8560-3cdb6e7a2729"] = "TsProxyRpcInterface", ["53b46b02-c73b-4a3e-8dee-b16b80672fc0"] = "TSVIPPublic", ["8fb6d884-2388-11d0-8c35-00c04fda2795"] = "W32Time", ["1a927394-352e-4553-ae3f-7cf4aafca620"] = "WdsRpcInterface", ["811109bf-a4e1-11d1-ab54-00a0c91e9b45"] = "winsi2", ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28"] = "Witness", } &redef; # Microsoft DCE-RPC Interface Methods (aka "operations") -- 1,145 more -- # to add to Bro DCE_RPC::operations. # # References: # MSDN Library > Open Specifications > Protocols > Windows Protocols > Technical Documents # https://msdn.microsoft.com/en-us/library/jj712081.aspx # # Marchand, Windows Network Services Internals [2006] # http://index-of.es/Windows/win_net_srv.pdf redef DCE_RPC::operations += { # authzr - MSDN Ref: Remote Authorization API Protocol [ms-raa] ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x00] = "AuthzrFreeContext", ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x01] = "AuthzrInitializeContextFromSid", ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x02] = "AuthrzInitializeCompoundContext", ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x03] = "AuthrzAccessCheck", ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x04] = "AuthrzGetInformationFromContext", ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x05] = "AuthrzModifyClaims", ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x06] = "AuthrzModifySids", # BitsPeerAuth - MSDN Ref: BITS Peer-Caching: Peer Authentication Protocol [ms-bpau] ["e3d0d746-d2af-40fd-8a7a-0d7078bb7092",0x00] = "ExchangePublicKeys", # clusapi (v2) - MSDN Ref: Failover Cluster Mgmt API Protocol [ms-cmrp] ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x00] = "ApiOpenCluster", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x01] = "ApiCloseCluster", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x02] = "ApiSetClusterName", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x03] = "ApiGetClusterName", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x04] = "ApiGetClusterVersion", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x05] = "ApiGetQuorumResource", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x06] = "ApiSetQuorumResource", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x07] = "ApiCreateEnum", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x08] = "ApiOpenResource", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x09] = "ApiCreateResource", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0A] = "ApiDeleteResource", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0B] = "ApiCloseResource", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0C] = "ApiGetResourceState", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0D] = "ApiSetResourceName", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0E] = "ApiGetResourceId", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0F] = "ApiGetResourceType", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x10] = "ApiFailResource", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x11] = "ApiOnlineResource", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x12] = "ApiOfflineResource", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x13] = "ApiAddResourceDependency", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x14] = "ApiRemoveResourceDependency", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x15] = "ApiCanResourceBeDependent", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x16] = "ApiCreateResEnum", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x17] = "ApiAddResourceNode", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x18] = "ApiRemoveResourceNode", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x19] = "ApiChangeResourceGroup", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1A] = "ApiCreateResourceType", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1B] = "ApiDeleteResourceType", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1C] = "ApiGetRootKey", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1D] = "ApiCreateKey", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1E] = "ApiOpenKey", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1F] = "ApiEnumKey", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x20] = "ApiSetValue", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x21] = "ApiDeleteValue", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x22] = "ApiQueryValue", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x23] = "ApiDeleteKey", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x24] = "ApiEnumValue", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x25] = "ApiCloseKey", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x26] = "ApiQueryInfoKey", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x27] = "ApiSetKeySecurity", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x28] = "ApiGetKeySecurity", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x29] = "ApiOpenGroup", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2A] = "ApiCreateGroup", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2B] = "ApiDeleteGroup", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2C] = "ApiCloseGroup", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2D] = "ApiGetGroupState", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2E] = "ApiSetGroupName", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2F] = "ApiGetGroupId", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x30] = "ApiGetNodeId", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x31] = "ApiOnlineGroup", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x32] = "ApiOfflineGroup", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x33] = "ApiMoveGroup", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x34] = "ApiMoveGroupToNode", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x35] = "ApiCreateGroupResourceEnum", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x36] = "ApiSetGroupNodeList", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x37] = "ApiCreateNotify", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x38] = "ApiCloseNotify", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x39] = "ApiAddNotifyCluster", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3A] = "ApiAddNotifyNode", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3B] = "ApiAddNotifyGroup", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3C] = "ApiAddNotifyResource", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3D] = "ApiAddNotifyKey", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3E] = "ApiReAddNotifyNode", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3F] = "ApiReAddNotifyGroup", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x40] = "ApiReAddNotifyResource", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x41] = "ApiGetNotify", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x42] = "ApiOpenNode", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x43] = "ApiCloseNode", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x44] = "ApiGetNodeState", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x45] = "ApiPauseNode", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x46] = "ApiResumeNode", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x47] = "ApiEvictNode", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x48] = "ApiNodeResourceControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x49] = "ApiResourceControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4A] = "ApiNodeResourceTypeControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4B] = "ApiResourceTypeControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4C] = "ApiNodeGroupControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4D] = "ApiGroupControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4E] = "ApiNodeNodeControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4F] = "ApiNodeControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x50] = "Opnum80NotUsedOnWire", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x51] = "ApiOpenNetwork", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x52] = "ApiCloseNetwork", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x53] = "ApiGetNetworkState", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x54] = "ApiSetNetworkName", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x55] = "ApiCreateNetworkEnum", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x56] = "ApiGetNetworkId", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x57] = "ApiSetNetworkPriorityOrder", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x58] = "ApiNodeNetworkControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x59] = "ApiNetworkControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5A] = "ApiAddNotifyNetwork", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5B] = "ApiReAddNotifyNetwork", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5C] = "ApiOpenNetInterface", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5D] = "ApiCloseNetInterface", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5E] = "ApiGetNetInterfaceState", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5F] = "ApiGetNetInterface", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x60] = "ApiGetNetInterfaceId", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x61] = "ApiNodeNetInterfaceControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x62] = "ApiNetInterfaceControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x63] = "ApiAddNotifyNetInterface", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x64] = "ApiReAddNotifyNetInterface", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x65] = "ApiCreateNodeEnum", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x66] = "ApiGetClusterVersion2", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x67] = "ApiCreateResTypeEnum", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x68] = "ApiBackupClusterDatabase", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x69] = "ApiNodeClusterControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x6A] = "ApiClusterControl", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x6B] = "ApiUnblockGetNotifyCall", ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x6C] = "ApiSetServiceAccountPassword", # dhcpsrv - MSDN Ref: DHCP Server Mgmt Protocol [ms-dhcpm] ["6bffd098-a112-3610-9833-46c3f874532d",0x00] = "R_DhcpCreateSubnet", ["6bffd098-a112-3610-9833-46c3f874532d",0x01] = "R_DhcpSetSubnetInfo", ["6bffd098-a112-3610-9833-46c3f874532d",0x02] = "R_DhcpGetSubnetInfo", ["6bffd098-a112-3610-9833-46c3f874532d",0x03] = "R_DhcpEnumSubnets", ["6bffd098-a112-3610-9833-46c3f874532d",0x04] = "R_DhcpAddSubnetElement", ["6bffd098-a112-3610-9833-46c3f874532d",0x05] = "R_DhcpEnumSubnetElements", ["6bffd098-a112-3610-9833-46c3f874532d",0x06] = "R_DhcpRemoveSubnetElement", ["6bffd098-a112-3610-9833-46c3f874532d",0x07] = "R_DhcpDeleteSubnet", ["6bffd098-a112-3610-9833-46c3f874532d",0x08] = "R_DhcpCreateOption", ["6bffd098-a112-3610-9833-46c3f874532d",0x09] = "R_DhcpSetOptionInfo", ["6bffd098-a112-3610-9833-46c3f874532d",0x0A] = "R_DhcpGetOptionInfo", ["6bffd098-a112-3610-9833-46c3f874532d",0x0B] = "R_DhcpRemoveOption", ["6bffd098-a112-3610-9833-46c3f874532d",0x0C] = "R_DhcpSetOptionValue", ["6bffd098-a112-3610-9833-46c3f874532d",0x0D] = "R_DhcpGetOptionValue", ["6bffd098-a112-3610-9833-46c3f874532d",0x0E] = "R_DhcpEnumOptionValues", ["6bffd098-a112-3610-9833-46c3f874532d",0x0F] = "R_DhcpRemoveOptionValue", ["6bffd098-a112-3610-9833-46c3f874532d",0x10] = "R_DhcpCreateClientInfo", ["6bffd098-a112-3610-9833-46c3f874532d",0x11] = "R_DhcpSetClientInfo", ["6bffd098-a112-3610-9833-46c3f874532d",0x12] = "R_DhcpGetClientInfo", ["6bffd098-a112-3610-9833-46c3f874532d",0x13] = "R_DhcpDeleteClientInfo", ["6bffd098-a112-3610-9833-46c3f874532d",0x14] = "R_DhcpEnumSubnetClients", ["6bffd098-a112-3610-9833-46c3f874532d",0x15] = "R_DhcpGetClientOptions", ["6bffd098-a112-3610-9833-46c3f874532d",0x16] = "R_DhcpGetMibInfo", ["6bffd098-a112-3610-9833-46c3f874532d",0x17] = "R_DhcpEnumOptions", ["6bffd098-a112-3610-9833-46c3f874532d",0x18] = "R_DhcpSetOptionValues", ["6bffd098-a112-3610-9833-46c3f874532d",0x19] = "R_DhcpServerSetConfig", ["6bffd098-a112-3610-9833-46c3f874532d",0x1A] = "R_DhcpServerGetConfig", ["6bffd098-a112-3610-9833-46c3f874532d",0x1B] = "R_DhcpScanDatabase", ["6bffd098-a112-3610-9833-46c3f874532d",0x1C] = "R_DhcpGetVersion", ["6bffd098-a112-3610-9833-46c3f874532d",0x1D] = "R_DhcpAddSubnetElementV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x1E] = "R_DhcpEnumSubnetElementsV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x1F] = "R_DhcpRemoveSubnetElementV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x20] = "R_DhcpCreateClientInfoV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x21] = "R_DhcpSetClientInfoV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x22] = "R_DhcpGetClientInfoV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x23] = "R_DhcpEnumSubnetClientsV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x24] = "R_DhcpSetSuperScopeV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x25] = "R_DhcpGetSuperScopeInfoV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x26] = "R_DhcpDeleteSuperScopeV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x27] = "R_DhcpServerSetConfigV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x28] = "R_DhcpServerGetConfigV4", ["6bffd098-a112-3610-9833-46c3f874532d",0x29] = "R_DhcpServerSetConfigVQ", ["6bffd098-a112-3610-9833-46c3f874532d",0x2A] = "R_DhcpServerGetConfigVQ", ["6bffd098-a112-3610-9833-46c3f874532d",0x2B] = "R_DhcpGetMibInfoVQ", ["6bffd098-a112-3610-9833-46c3f874532d",0x2C] = "R_DhcpCreateClientInfoVQ", ["6bffd098-a112-3610-9833-46c3f874532d",0x2D] = "R_DhcpSetClientInfoVQ", ["6bffd098-a112-3610-9833-46c3f874532d",0x2E] = "R_DhcpGetClientInfoVQ", ["6bffd098-a112-3610-9833-46c3f874532d",0x2F] = "R_DhcpEnumSubnetClientsVQ", ["6bffd098-a112-3610-9833-46c3f874532d",0x30] = "R_DhcpCreateSubnetVQ", ["6bffd098-a112-3610-9833-46c3f874532d",0x31] = "R_DhcpGetSubnetInfoVQ", ["6bffd098-a112-3610-9833-46c3f874532d",0x32] = "R_DhcpSetSubnetInfoVQ", # dhcpsrv2 - MSDN Ref: DHCP Server Mgmt Protocol [ms-dhcpm] ["5b821720-f63b-11d0-aad2-00c04fc324db",0x00] = "R_DhcpEnumSubnetClientsV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x01] = "R_DhcpSetMScopeInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x02] = "R_DhcpGetMScopeInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x03] = "R_DhcpEnumMScopes", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x04] = "R_DhcpAddMScopeElement", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x05] = "R_DhcpEnumMScopeElements", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x06] = "R_DhcpRemoveMScopeElement", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x07] = "R_DhcpDeleteMScope", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x08] = "R_DhcpScanMDatabase", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x09] = "R_DhcpCreateMClientInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0A] = "R_DhcpSetMClientInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0B] = "R_DhcpGetMClientInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0C] = "R_DhcpDeleteMClientInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0D] = "R_DhcpEnumMScopeClients", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0E] = "R_DhcpCreateOptionV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0F] = "R_DhcpSetOptionInfoV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x10] = "R_DhcpGetOptionInfoV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x11] = "R_DhcpEnumOptionsV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x12] = "R_DhcpRemoveOptionV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x13] = "R_DhcpSetOptionValueV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x14] = "R_DhcpSetOptionValuesV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x15] = "R_DhcpGetOptionValueV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x16] = "R_DhcpEnumOptionValuesV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x17] = "R_DhcpRemoveOptionValueV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x18] = "R_DhcpCreateClass", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x19] = "R_DhcpModifyClass", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1A] = "R_DhcpDeleteClass", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1B] = "R_DhcpGetClassInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1C] = "R_DhcpEnumClasses", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1D] = "R_DhcpGetAllOptions", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1E] = "R_DhcpGetAllOptionValues", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1F] = "R_DhcpGetMCastMibInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x20] = "R_DhcpAuditLogSetParams", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x21] = "R_DhcpAuditLogGetParams", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x22] = "R_DhcpServerQueryAttribute", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x23] = "R_DhcpServerQueryAttributes", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x24] = "R_DhcpServerRedoAuthorization", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x25] = "R_DhcpAddSubnetElementV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x26] = "R_DhcpEnumSubnetElementsV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x27] = "R_DhcpRemoveSubnetElementV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x28] = "R_DhcpGetServerBindingInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x29] = "R_DhcpSetServerBindingInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2A] = "R_DhcpQueryDnsRegCredentials", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2B] = "R_DhcpSetDnsRegCredentials", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2C] = "R_DhcpBackupDatabase", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2D] = "R_DhcpRestoreDatabase", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2E] = "R_DhcpGetServerSpecificStrings", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2F] = "R_DhcpCreateOptionV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x30] = "R_DhcpSetOptionInfoV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x31] = "R_DhcpGetOptionInfoV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x32] = "R_DhcpEnumOptionsV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x33] = "R_DhcpRemoveOptionV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x34] = "R_DhcpSetOptionValueV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x35] = "R_DhcpEnumOptionValuesV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x36] = "R_DhcpRemoveOptionValueV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x37] = "R_DhcpGetAllOptionsV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x38] = "R_DhcpGetAllOptionValuesV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x39] = "R_DhcpCreateSubnetV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3A] = "R_DhcpEnumSubnetsV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3B] = "R_DhcpAddSubnetElementV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3C] = "R_DhcpEnumSubnetElementsV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3D] = "R_DhcpRemoveSubnetElementV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3E] = "R_DhcpDeleteSubnetV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3F] = "R_DhcpGetSubnetInfoV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x40] = "R_DhcpEnumSubnetClientsV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x41] = "R_DhcpServerSetConfigV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x42] = "R_DhcpServerGetConfigV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x43] = "R_DhcpGetMibInfoV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x45] = "R_DhcpGetServerBindingInfoV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x46] = "R_DhcpSetServerBindingInfoV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x47] = "R_DhcpSetClientInfoV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x48] = "R_DhcpGetClientInfoV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x49] = "R_DhcpDeleteClientInfoV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4A] = "R_DhcpCreateClassV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4B] = "R_DhcpModifyClassV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4C] = "R_DhcpDeleteClassV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4D] = "R_DhcpEnumClassesV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4E] = "R_DhcpGetOptionValueV6", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4F] = "R_DhcpSetSubnetDelayOffer", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x50] = "R_DhcpGetSubnetDelayOffer", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x51] = "R_DhcpGetMibInfoV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x52] = "R_DhcpAddFilterV4", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x53] = "R_DhcpDeleteFilterV4", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x54] = "R_DhcpSetFilterV4", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x55] = "R_DhcpGetFilterV4", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x56] = "R_DhcpEnumFilterV4", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x57] = "R_DhcpSetDnsRegCredentialsV5", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x58] = "R_DhcpEnumSubnetClientsFilterStatusInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x59] = "R_DhcpV4FailoverCreateRelationship", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5A] = "R_DhcpV4FailoverSetRelationship", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5B] = "R_DhcpV4FailoverDeleteRelationship", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5C] = "R_DhcpV4FailoverGetRelationship", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5D] = "R_DhcpV4FailoverEnumRelationship", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5E] = "R_DhcpV4FailoverAddScopeToRelationship", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5F] = "R_DhcpV4FailoverDeleteScopeFromRelationship", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x60] = "R_DhcpV4FailoverGetScopeRelationship", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x61] = "R_DhcpV4FailoverGetScopeStatistics", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x62] = "R_DhcpV4FailoverGetClientInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x63] = "R_DhcpV4FailoverGetSystemTime", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x64] = "R_DhcpV4FailoverTriggerAddrAllocation", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x65] = "R_DhcpV4SetOptionValue", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x66] = "R_DhcpV4SetOptionValues", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x67] = "R_DhcpV4GetOptionValue", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x68] = "R_DhcpV4RemoveOptionValue", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x69] = "R_DhcpV4GetAllOptionValues", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6A] = "R_DhcpV4QueryPolicyEnforcement", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6B] = "R_DhcpSetPolicyEnforcement", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6C] = "R_DhcpV4CreatePolicy", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6D] = "R_DhcpV4GetPolicy", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6E] = "R_DhcpV4SetPolicy", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6F] = "R_DhcpV4DeletePolicy", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x70] = "R_DhcpV4EnumPolicies", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x71] = "R_DhcpV4AddPolicyRange", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x72] = "R_DhcpV4RemovePolicyRange", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x73] = "R_DhcpV4EnumSubnetClients", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x74] = "R_DhcpV6SetStatelessStoreParams", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x75] = "R_DhcpV6GetStatelessStoreParams", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x76] = "R_DhcpV6GetStatelessStatistics", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x77] = "R_DhcpV4EnumSubnetReservations", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x78] = "R_DhcpV4GetFreeIPAddress", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x79] = "R_DhcpV6GetFreeIPAddress", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7A] = "R_DhcpV4CreateClientInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7B] = "R_DhcpV4GetClientInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7C] = "R_DhcpV6CreateClientInfo", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7D] = "R_DhcpV4FailoverGetAddressStatus", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7E] = "R_DhcpV4CreatePolicyEx", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7F] = "R_DhcpV4GetPolicyEx", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x80] = "R_DhcpV4SetPolicyEx", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x81] = "R_DhcpV4EnumPoliciesEx", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x82] = "R_DhcpV4EnumSubnetClientsEx", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x83] = "R_DhcpV4CreateClientInfoEx", ["5b821720-f63b-11d0-aad2-00c04fc324db",0x84] = "R_DhcpV4GetClientInfoEx", # dsaop - MSDN Ref: Directory Replication Service (DRS) Remote Protocol [ms-drsr] ["7c44d7d4-31d5-424c-bd5e-2b3e1f323d22",0x00] = "IDL_DSAPrepareScript", ["7c44d7d4-31d5-424c-bd5e-2b3e1f323d22",0x01] = "IDL_DSAExecuteScript", # dscomm - MSDN Ref: Msg Queuing - Directory Service Protocol [ms-mqds] ["77df7a80-f298-11d0-8358-00a024c480a8",0x00] = "S_DSCreateObject", ["77df7a80-f298-11d0-8358-00a024c480a8",0x01] = "S_DSDeleteObject", ["77df7a80-f298-11d0-8358-00a024c480a8",0x02] = "S_DSGetProps", ["77df7a80-f298-11d0-8358-00a024c480a8",0x03] = "S_DSSetProps", ["77df7a80-f298-11d0-8358-00a024c480a8",0x04] = "S_DSGetObjectSecurity", ["77df7a80-f298-11d0-8358-00a024c480a8",0x05] = "S_DSSetObjectSecurity", ["77df7a80-f298-11d0-8358-00a024c480a8",0x06] = "S_DSLookupBegin", ["77df7a80-f298-11d0-8358-00a024c480a8",0x07] = "S_DSLookupNext", ["77df7a80-f298-11d0-8358-00a024c480a8",0x08] = "S_DSLookupEnd", ["77df7a80-f298-11d0-8358-00a024c480a8",0x09] = "Opnum9NotUsedOnWire", ["77df7a80-f298-11d0-8358-00a024c480a8",0x0A] = "S_DSDeleteObjectGuid", ["77df7a80-f298-11d0-8358-00a024c480a8",0x0B] = "S_DSGetPropsGuid", ["77df7a80-f298-11d0-8358-00a024c480a8",0x0C] = "S_DSSetPropsGuid", ["77df7a80-f298-11d0-8358-00a024c480a8",0x0D] = "S_DSGetObjectSecurityGuid", ["77df7a80-f298-11d0-8358-00a024c480a8",0x0E] = "S_DSSetObjectSecurityGuid", ["77df7a80-f298-11d0-8358-00a024c480a8",0x0F] = "Opnum15NotUsedOnWire", ["77df7a80-f298-11d0-8358-00a024c480a8",0x10] = "Opnum16NotUsedOnWire", ["77df7a80-f298-11d0-8358-00a024c480a8",0x11] = "Opnum17NotUsedOnWire", ["77df7a80-f298-11d0-8358-00a024c480a8",0x12] = "Opnum18NotUsedOnWire", ["77df7a80-f298-11d0-8358-00a024c480a8",0x13] = "S_DSQMSetMachineProperties", ["77df7a80-f298-11d0-8358-00a024c480a8",0x14] = "S_DSCreateServersCache", ["77df7a80-f298-11d0-8358-00a024c480a8",0x15] = "S_DSQMGetObjectSecurity", ["77df7a80-f298-11d0-8358-00a024c480a8",0x16] = "S_DSValidateServer", ["77df7a80-f298-11d0-8358-00a024c480a8",0x17] = "S_DSCloseServerHandle", ["77df7a80-f298-11d0-8358-00a024c480a8",0x18] = "Opnum24NotUsedOnWire", ["77df7a80-f298-11d0-8358-00a024c480a8",0x19] = "Opnum25NotUsedOnWire", ["77df7a80-f298-11d0-8358-00a024c480a8",0x1A] = "Opnum26NotUsedOnWire", ["77df7a80-f298-11d0-8358-00a024c480a8",0x1B] = "S_DSGetServerPort", # dscomm2 - MSDN Ref: Msg Queuing - Directory Service Protocol [ms-mqds] ["708cca10-9569-11d1-b2a5-0060977d8118",0x00] = "S_DSGetComputerSites", ["708cca10-9569-11d1-b2a5-0060977d8118",0x01] = "S_DSGetPropsEx", ["708cca10-9569-11d1-b2a5-0060977d8118",0x02] = "S_DSGetPropsGuidEx", ["708cca10-9569-11d1-b2a5-0060977d8118",0x03] = "S_DSBeginDeleteNotification", ["708cca10-9569-11d1-b2a5-0060977d8118",0x04] = "S_DSNotifyDelete", ["708cca10-9569-11d1-b2a5-0060977d8118",0x05] = "S_DSEndDeleteNotification", ["708cca10-9569-11d1-b2a5-0060977d8118",0x06] = "S_DSIsServerGC", ["708cca10-9569-11d1-b2a5-0060977d8118",0x07] = "Opnum7NotUsedOnWire", ["708cca10-9569-11d1-b2a5-0060977d8118",0x08] = "S_DSGetGCListInDomain", # efsrpc - MSDN Ref: Encrypting File System Remote Protocol [ms-efsr] ["df1941c5-fe89-4e79-bf10-463657acf44d",0x00] = "EfsRpcOpenFileRaw", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x01] = "EfsRpcReadFileRaw", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x02] = "EfsRpcWriteFileRaw", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x03] = "EfsRpcCloseRaw", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x04] = "EfsRpcEncryptFileSrv", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x05] = "EfsDecryptFileSrv", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x06] = "EfsRpcQueryUsersOnFile", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x07] = "EfsRpcQueryRecoveryAgents", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x08] = "EfsRpcRemoveUsersFromFile", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x09] = "EfsRpcAddUsersToFile", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0A] = "Opnum10NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0B] = "EfsRpcNotSupported", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0C] = "EfsRpcFileKeyInfo", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0D] = "EfsRpcDuplicateEncryptionInfoFile", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0E] = "Opnum14NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0F] = "EfsRpcAddUsersToFileEx", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x10] = "EfsRpcFileKeyInfoEx", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x11] = "Opnum17NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x12] = "EfsRpcGetEncryptedFileMetadata", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x13] = "EfsRpcSetEncryptedFileMetadata", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x14] = "EfsRpcFlushEfsCache", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x15] = "EfsRpcEncryptFileExServ", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x16] = "EfsRpcQueryProtectors", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x17] = "Opnum23NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x18] = "Opnum24NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x19] = "Opnum25NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1A] = "Opnum26NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1B] = "Opnum27NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1C] = "Opnum28NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1D] = "Opnum29NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1E] = "Opnum30NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1F] = "Opnum31NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x20] = "Opnum32NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x21] = "Opnum33NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x22] = "Opnum34NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x23] = "Opnum35NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x24] = "Opnum36NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x25] = "Opnum37NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x26] = "Opnum38NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x27] = "Opnum39NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x28] = "Opnum40NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x29] = "Opnum41NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x2A] = "Opnum42NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x2B] = "Opnum43NotUsedOnWire", ["df1941c5-fe89-4e79-bf10-463657acf44d",0x2C] = "Opnum44NotUsedOnWire", # efsrpc2 - MSDN Ref: Encrypting File System Remote Protocol [ms-efsr] ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x00] = "EfsRpcOpenFileRaw", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x01] = "EfsRpcReadFileRaw", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x02] = "EfsRpcWriteFileRaw", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x03] = "EfsRpcCloseRaw", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x04] = "EfsRpcEncryptFileSrv", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x05] = "EfsDecryptFileSrv", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x06] = "EfsRpcQueryUsersOnFile", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x07] = "EfsRpcQueryRecoveryAgents", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x08] = "EfsRpcRemoveUsersFromFile", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x09] = "EfsRpcAddUsersToFile", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0A] = "Opnum10NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0B] = "EfsRpcNotSupported", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0C] = "EfsRpcFileKeyInfo", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0D] = "EfsRpcDuplicateEncryptionInfoFile", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0E] = "Opnum14NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0F] = "EfsRpcAddUsersToFileEx", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x10] = "EfsRpcFileKeyInfoEx", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x11] = "Opnum17NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x12] = "EfsRpcGetEncryptedFileMetadata", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x13] = "EfsRpcSetEncryptedFileMetadata", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x14] = "EfsRpcFlushEfsCache", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x15] = "EfsRpcEncryptFileExServ", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x16] = "EfsRpcQueryProtectors", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x17] = "Opnum23NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x18] = "Opnum24NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x19] = "Opnum25NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1A] = "Opnum26NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1B] = "Opnum27NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1C] = "Opnum28NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1D] = "Opnum29NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1E] = "Opnum30NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1F] = "Opnum31NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x20] = "Opnum32NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x21] = "Opnum33NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x22] = "Opnum34NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x23] = "Opnum35NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x24] = "Opnum36NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x25] = "Opnum37NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x26] = "Opnum38NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x27] = "Opnum39NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x28] = "Opnum40NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x29] = "Opnum41NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x2A] = "Opnum42NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x2B] = "Opnum43NotUsedOnWire", ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x2C] = "Opnum44NotUsedOnWire", # FileServerVssAgent - MSDN Ref: File Server Remote VSS Protocol [ms-fsrvp] ["a8e0653c-2744-4389-a61d-7373df8b2292",0x00] = "GetSupportedVersion", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x01] = "SetContext", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x02] = "StartShadowCopySet", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x03] = "AddToShadowCopySet", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x04] = "CommitShadowCopySet", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x05] = "ExposeShadowCopySet", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x06] = "RecoveryCompleteShadowCopySet", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x07] = "AbortShadowCopySet", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x08] = "IsPathSupported", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x09] = "IsPathShadowCopied", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x0A] = "GetShareMapping", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x0B] = "DeleteShareMapping", ["a8e0653c-2744-4389-a61d-7373df8b2292",0x0C] = "PrepareShadowCopy", # FrsTransport - MSDN Ref: DFS Replication Protocol [ms-frs2] ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x00] = "CheckConnectivity", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x01] = "EstablishConnection", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x02] = "EstablishSession", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x03] = "RequestUpdates", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x04] = "RequestVersionVector", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x05] = "AsyncPoll", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x06] = "RequestRecords", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x07] = "UpdateCancel", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x08] = "RawGetFileData", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x09] = "RdcGetSignatures", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0A] = "RdcPushSourceNeeds", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0B] = "RdcGetFileData", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0C] = "RdcClose", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0D] = "InitializeFileTransferAsync", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0E] = "Opnum14NotUsedOnWire", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0F] = "RawGetFileDataAsync", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x10] = "RdcGetFileDataAsync", ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x11] = "RdcFileDataTransferKeepAlive", # IADProxy - MSDN Ref: DFS Replication Helper Protocol [ms-dfsrh] ["4bb8ab1d-9ef9-4100-8eb6-dd4b4e418b72",0x03] = "CreateObject", ["4bb8ab1d-9ef9-4100-8eb6-dd4b4e418b72",0x04] = "DeleteObject", ["4bb8ab1d-9ef9-4100-8eb6-dd4b4e418b72",0x05] = "ModifyObject", # IADProxy2 - MSDN Ref: DFS Replication Helper Protocol [ms-dfsrh] ["c4b0c7d9-abe0-4733-a1e1-9fdedf260c7a",0x06] = "CreateObject", ["c4b0c7d9-abe0-4733-a1e1-9fdedf260c7a",0x07] = "DeleteObject", ["c4b0c7d9-abe0-4733-a1e1-9fdedf260c7a",0x08] = "ModifyObject", # ICertAdminD - MSDN Ref: Certificate Services Remote Administration Protocol [ms-csra] ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x03] = "SetExtension", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x04] = "SetAttributes", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x05] = "ResubmitRequest", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x06] = "DenyRequest", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x07] = "IsValidCertificate", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x08] = "PublishCRL", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x09] = "GetCRL", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0A] = "RevokeCertificate", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0B] = "EnumViewColumn", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0C] = "GetViewDefaultColumnSet", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0D] = "EnumAttributesOrExtensions", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0E] = "OpenView", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0F] = "EnumView", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x10] = "CloseView", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x11] = "ServerControl", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x12] = "Ping", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x13] = "GetServerState", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x14] = "BackupPrepare", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x15] = "BackupEnd", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x16] = "BackupGetAttachmentInformation", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x17] = "BackupGetBackupLogs", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x18] = "BackupOpenFile", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x19] = "BackupReadFile", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x1A] = "BackupCloseFile", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x1B] = "BackupTruncateLogs", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x1C] = "ImportCertificate", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x1D] = "BackupGetDynamicFiles", ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x1E] = "RestoreGetDatabaseLocations", # ICertAdminD2 - MSDN Ref: Certificate Services Remote Administration Protocol [ms-csra] ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x1F] = "PublishCRLs", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x20] = "GetCAProperty", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x21] = "SetCAProperty", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x22] = "GetCAPropertyInfo", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x23] = "EnumViewColumnTable", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x24] = "GetCASecurity", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x25] = "SetCASecurity", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x26] = "Ping2", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x27] = "GetArchivedKey", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x28] = "GetAuditFilter", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x29] = "SetAuditFilter", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2A] = "GetOfficerRights", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2B] = "SetOfficerRights", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2C] = "GetConfigEntry", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2D] = "SetConfigEntry", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2E] = "ImportKey", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2F] = "GetMyRoles", ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x30] = "DeleteRow", # ICertRequestD - MSDN Ref: Windows Client Certificate Enrollment Protocol [ms-wcce] ["d99e6e70-fc88-11d0-b498-00a0c90312f3",0x03] = "Request", ["d99e6e70-fc88-11d0-b498-00a0c90312f3",0x04] = "GetCACert", ["d99e6e70-fc88-11d0-b498-00a0c90312f3",0x05] = "Ping", # ICertRequestD2 - MSDN Ref: Windows Client Certificate Enrollment Protocol [ms-wcce] ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x03] = "Request", ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x04] = "GetCACert", ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x05] = "Ping", ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x06] = "Request2", ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x07] = "GetCAProperty", ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x08] = "GetCAPropertyInfo", ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x09] = "Ping2", # IDMNotify - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] ["d2d79df7-3400-11d0-b40b-00aa005ff586",0x00] = "ObjectsChanged", # IDMRemoteServer - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] ["3a410f21-553f-11d1-8e5e-00a0c92c9d5d",0x03] = "CreateRemoteObject", # IEnumWbemClassObject - MSDN Ref: WMI Remote Protocol [ms-wmi] ["027947e1-d731-11ce-a357-000000000001",0x03] = "Reset", ["027947e1-d731-11ce-a357-000000000001",0x04] = "Next", ["027947e1-d731-11ce-a357-000000000001",0x05] = "NextAsync", ["027947e1-d731-11ce-a357-000000000001",0x06] = "Clone", ["027947e1-d731-11ce-a357-000000000001",0x07] = "Skip", # IEventService I Eventlog - MSDN Ref: Eventlog Remoting Protocol v6.0 [ms-even6] ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x00] = "EvtRpcRegisterRemoteSubscription", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x01] = "EvtRpcRemoteSubscriptionNextAsync", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x02] = "EvtRpcRemoteSubscriptionNext", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x03] = "EvtRpcRemoteSubscriptionWaitAsync", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x04] = "EvtRpcRegisterControllableOperation", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x05] = "EvtRpcRegisterLogQuery", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x06] = "EvtRpcClearLog", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x07] = "EvtRpcExportLog", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x08] = "EvtRpcLocalizeExportLog", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x09] = "EvtRpcMessageRender", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0A] = "EvtRpcMessageRenderDefault", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0B] = "EvtRpcQueryNext", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0C] = "EvtRpcQuerySeek", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0D] = "EvtRpcClose", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0E] = "EvtRpcCancel", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0F] = "EvtRpcAssertConfig", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x10] = "EvtRpcRetractConfig", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x11] = "EvtRpcOpenLogHandle", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x12] = "EvtRpcGetLogFileInfo", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x13] = "EvtRpcGetChannelList", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x14] = "EvtRpcGetChannelConfig", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x15] = "EvtRpcPutChannelConfig", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x16] = "EvtRpcGetPublisherList", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x17] = "EvtRpcGetPublisherListForChannel", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x18] = "EvtRpcGetPublisherMetadata", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x19] = "EvtRpcGetPublisherResourceMetadata", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x1A] = "EvtRpcGetEventMetadataEnum", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x1B] = "EvtRpcGetNextEventMetadata", ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x1C] = "EvtRpcGetClassicLogDisplayName", # IIISApplicationAdmin - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x03] = "CreateApplication", ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x04] = "DeleteApplication", ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x05] = "CreateApplicationPool", ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x06] = "DeleteApplicationPool", ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x07] = "EnumerateApplicationsInPool", ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x08] = "RecycleApplicationPool", ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x09] = "GetProcessMode", # IIISCertObj - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x07] = "Opnum7NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x08] = "Opnum8NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x09] = "Opnum9NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0A] = "InstanceName", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0B] = "Opnum11NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0C] = "IsInstallRemote", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0D] = "Opnum13NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0E] = "IsExportableRemote", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0F] = "Opnum15NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x10] = "GetCertInfoRemote", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x11] = "Opnum17NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x12] = "Opnum18NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x13] = "Opnum19NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x14] = "Opnum20NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x15] = "Opnum21NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x16] = "ImportFromBlob", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x17] = "ImportFromBlobGetHash", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x18] = "Opnum24NotUsedOnWire", ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x19] = "ExportToBlob", # IIisServiceControl - MSDN Ref: IIS Service Control Protocol [ms-iiss] ["e8fb8620-588f-11d2-9d61-00c04f79c5fe",0x07] = "Stop", ["e8fb8620-588f-11d2-9d61-00c04f79c5fe",0x08] = "Start", ["e8fb8620-588f-11d2-9d61-00c04f79c5fe",0x09] = "Reboot", ["e8fb8620-588f-11d2-9d61-00c04f79c5fe",0x0A] = "Status", ["e8fb8620-588f-11d2-9d61-00c04f79c5fe",0x0B] = "Kill", # IManagedObject - MSDN Ref: IManagedObject Interface Protocol [ms-ioi] ["c3fcc19e-a970-11d2-8b5a-00a0c9b7c9c4",0x03] = "GetSerializedBuffer", ["c3fcc19e-a970-11d2-8b5a-00a0c9b7c9c4",0x04] = "GetObjectIdentify", # IManageTelnetSessions - MSDN Ref: Telnet Server Remote Administration Protocol [ms-tsrap] ["034634fd-ba3f-11d1-856a-00a0c944138c",0x07] = "GetTelnetSessions", ["034634fd-ba3f-11d1-856a-00a0c944138c",0x08] = "TerminateSession", ["034634fd-ba3f-11d1-856a-00a0c944138c",0x09] = "SendMsgToASession", # IMSAdminBase2W - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] ["8298d101-f992-43b7-8eca-5052d885b995",0x22] = "BackupWithPasswrd", ["8298d101-f992-43b7-8eca-5052d885b995",0x23] = "RestoreWithPasswrd", ["8298d101-f992-43b7-8eca-5052d885b995",0x24] = "Export", ["8298d101-f992-43b7-8eca-5052d885b995",0x25] = "Import", ["8298d101-f992-43b7-8eca-5052d885b995",0x26] = "RestoreHistory", ["8298d101-f992-43b7-8eca-5052d885b995",0x27] = "EnumHistory", # IMSAdminBase3W - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] ["f612954d-3b0b-4c56-9563-227b7be624b4",0x28] = "GetChildPaths", # IMSAdminBaseW - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x03] = "AddKey", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x04] = "DeleteKey", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x05] = "DeleteChildKEys", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x06] = "EnumKeys", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x07] = "CopyKey", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x08] = "RenameKey", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x09] = "R_SetData", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0A] = "R_GetData", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0B] = "DeleteDate", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0C] = "R_EnumData", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0D] = "R_GetAllData", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0E] = "DeleteAllData", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0F] = "CopyData", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x10] = "GetDataPaths", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x11] = "OpenKey", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x12] = "CloseKey", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x13] = "ChangePermissions", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x14] = "SaveData", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x15] = "GetHandleInfo", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x16] = "GetSystemChangeNumber", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x17] = "GetDataSetNumber", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x18] = "SetLastChangeTime", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x19] = "GetLastChangeTime", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1A] = "R_KeyExchangePhase1", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1B] = "R_KeyExchangePhase2", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1C] = "Backup", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1D] = "Restore", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1E] = "EnumBackups", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1F] = "DeleteBackup", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x20] = "UnmarshalInterface", ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x21] = "R_GetServerGuid", # inetinfo - MSDN Ref: IIS Inetinfo Remote Protocol [ms-irp] ["82ad4280-036b-11cf-972c-00aa006887b0",0x00] = "R_InetInfoGetVersion", ["82ad4280-036b-11cf-972c-00aa006887b0",0x01] = "R_InetInfoGetAdminInformation", ["82ad4280-036b-11cf-972c-00aa006887b0",0x02] = "R_InsetInfoGetSites", ["82ad4280-036b-11cf-972c-00aa006887b0",0x03] = "R_InetInfoSetAdminInformation", ["82ad4280-036b-11cf-972c-00aa006887b0",0x04] = "R_InetInfoGetGlobalAdminInformation", ["82ad4280-036b-11cf-972c-00aa006887b0",0x05] = "R_InetInfoSetGlobalAdminInformation", ["82ad4280-036b-11cf-972c-00aa006887b0",0x06] = "R_InetInfoQueryStatistics", ["82ad4280-036b-11cf-972c-00aa006887b0",0x07] = "R_InetInfoClearStatistics", ["82ad4280-036b-11cf-972c-00aa006887b0",0x08] = "R_InetInfoFlushMemoryCache", ["82ad4280-036b-11cf-972c-00aa006887b0",0x09] = "R_InetInfoGetServerCapabilities", ["82ad4280-036b-11cf-972c-00aa006887b0",0x0A] = "R_W3QueryStatistics2", ["82ad4280-036b-11cf-972c-00aa006887b0",0x0B] = "R_W3ClearStatistics2", ["82ad4280-036b-11cf-972c-00aa006887b0",0x0C] = "R_FtpQueryStatistics2", ["82ad4280-036b-11cf-972c-00aa006887b0",0x0D] = "R_FtpClearStatistics2", ["82ad4280-036b-11cf-972c-00aa006887b0",0x0E] = "R_IISDEnumerateUsers", ["82ad4280-036b-11cf-972c-00aa006887b0",0x0F] = "R_IISDisconnectedUser", ["82ad4280-036b-11cf-972c-00aa006887b0",0x10] = "Opnum16NotUsedOnWire", ["82ad4280-036b-11cf-972c-00aa006887b0",0x11] = "Opnum17NotUsedOnWire", # IRemoteDispatch - MSDN Ref: IManagedObject Interface Protocol [ms-ioi] ["6619a740-8154-43be-a186-0319578e02db",0x07] = "RemoteDispatchAutoDone", ["6619a740-8154-43be-a186-0319578e02db",0x08] = "RemoteDispatchNotAutoDone", # IRemUnknown - MSDN Ref: DCOM Remote Protocol [ms-dcom] ["00000131-0000-0000-c000-000000000046",0x03] = "RemQueryInterface", ["00000131-0000-0000-c000-000000000046",0x04] = "RemAddRef", ["00000131-0000-0000-c000-000000000046",0x05] = "RemRelease", # IResourceManager - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x07] = "RetrieveEventList", ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x08] = "GetSystemAffinity", ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x09] = "ImportXMLFiles", ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0A] = "ExportXMLFiles", ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0B] = "RestoreXMLFiles", ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0C] = "GetDependencies", ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0D] = "GetServiceList", ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0E] = "GetllSAppPoolNames", ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0F] = "GetServerName", ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x10] = "GetCurrentMemory", # IResourceManager2 - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] ["2a3eb639-d134-422d-90d8-aaa1b5216202",0x07] = "ExportObjects", ["2a3eb639-d134-422d-90d8-aaa1b5216202",0x08] = "GetImportConflicts", ["2a3eb639-d134-422d-90d8-aaa1b5216202",0x09] = "ImportXml", ["2a3eb639-d134-422d-90d8-aaa1b5216202",0x0A] = "ExportXml", # ISDKey - MSDN Ref: Group Key Distribution Protocol [ms-gkdi] ["b9785960-524f-11df-8b6d-83dcded72085",0x00] = "GetKey", # IServerHealthReport - MSDN Ref: DFS Replication Helper Protocol [ms-dfsrh] ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x03] = "GetReport", ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x04] = "GetCompressedReport", ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x05] = "GetRawReportEx", ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x06] = "GetReferenceVersionVectors", ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x07] = "Opnum7NotUsedOnWire", ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x08] = "GetReferenceBacklogCounts", # IServerHealthReport2 - MSDN Ref: DFS Replication Helper Protocol [ms-dfsrh] ["20d15747-6c48-4254-a358-65039fd8c63c",0x09] = "GetReport", ["20d15747-6c48-4254-a358-65039fd8c63c",0x10] = "GetCompressedReport", # IServicedComponentInfo - MSDN Ref: IManagedObject Interface Protocol [ms-ioi] ["8165b19e-8d3a-4d0b-80c8-97de310db583",0x03] = "GetComponentInfo", # ITpmVirtualSmartCardManager - MSDN Ref: TPM Virtual Smart Card Mgmt Protocol [ms-tpmvsc] ["112b1dff-d9dc-41f7-869f-d67fee7cb591",0x03] = "CreateVirtualSmartCard", ["112b1dff-d9dc-41f7-869f-d67fee7cb591",0x04] = "DestroyVirtualSmartCard", # ITpmVirtualSmartCardManager2 - MSDN Ref: TPM Virtual Smart Card Mgmt Protocol [ms-tpmvsc] ["fdf8a2b9-02de-47f4-bc26-aa85ab5e5267",0x05] = "CreateVirtualSmartCardWithPinPolicy", # ITpmVirtualSmartCardManager3 - MSDN Ref: TPM Virtual Smart Card Mgmt Protocol [ms-tpmvsc] ["3c745a97-f375-4150-be17-5950f694c699",0x06] = "CreateVirtualSmartCardWithAttestation", # ITpmVirtualSmartCardManagerStatusCallback - MSDN Ref: TPM Virtual Smart Card Mgmt Protocol [ms-tpmvsc] ["1a1bb35f-abb8-451c-a1ae-33d98f1bef4a",0x03] = "ReportProgress", ["1a1bb35f-abb8-451c-a1ae-33d98f1bef4a",0x04] = "ReportError", # IUnknown - MSDN Ref: DCOM Remote Protocol [ms-dcom] ["00000000-0000-0000-c000-000000000046",0x00] = "Opnum0NotUsedOnWire", ["00000000-0000-0000-c000-000000000046",0x01] = "Opnum1NotUsedOnWire", ["00000000-0000-0000-c000-000000000046",0x02] = "Opnum2NotUsedOnWire", # IVolumeClient - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x03] = "EnumDisksEx", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x04] = "EnumDiskRegionsEx", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x05] = "CreatePartition", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x06] = "CreatePartitionAssignAndFormat", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x07] = "CreatePartitionAssignandFormatEx", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x08] = "DeletePartition", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x09] = "WriteSignature", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0A] = "MarkActivePartition", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0B] = "Eject", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0C] = "Opnum12NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0D] = "FTEnumVolumes", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0E] = "FTEnumLogicalDiskMembers", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0F] = "FTDeleteVolume", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x10] = "FTBreakMirror", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x11] = "FTResyncMirror", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x12] = "FTRegenerateParityStripe", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x13] = "FTReplaceMirrorPartition", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x14] = "FTReplaceParityStripePartition", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x15] = "EnumDriveLetters", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x16] = "AssignDriveLetter", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x17] = "FreeDriveLetter", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x18] = "EnumLocalFileSystems", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x19] = "GetInstalledFileSystems", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1A] = "Format", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1B] = "Opnum27NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1C] = "EnumVolumes", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1D] = "EnumVolumeMembers", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1E] = "CreateVolume", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1F] = "CreateVolumeAssignAndFormat", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x20] = "CreateVolumeAssignAndFormatEx", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x21] = "GetVolumeMountName", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x22] = "GrowVolume", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x23] = "DeleteVolume", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x24] = "AddMirror", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x25] = "RemoveMirror", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x26] = "SplitMirror", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x27] = "InitializeDiskEx", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x28] = "UninitializeDisk", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x29] = "ReConnectDisk", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2A] = "Opnum42NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2B] = "ImportDiskGroup", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2C] = "DiskMergeQuery", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2D] = "DiskMerge", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2E] = "Opnum46NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2F] = "ReAttachDisk", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x30] = "Opnum48NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x31] = "Opnum49NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x32] = "Opnum50NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x33] = "ReplaceRaid5Column", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x34] = "RestartVolume", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x35] = "GetEncapsulateDiskInfoEx", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x36] = "EncapsulateDiskEx", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x37] = "QueryChangePartitionNumbers", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x38] = "DeletePartitionNumberInfoFromRegistry", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x39] = "SetDontShow", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3A] = "GetDontShow", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3B] = "Opnum59NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3C] = "Opnum60NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3D] = "Opnum61NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3E] = "Opnum62NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3F] = "Opnum63NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x40] = "Opnum64NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x41] = "Opnum65NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x42] = "Opnum66NotUsedOnWire", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x43] = "EnumTasks", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x44] = "GetTaskDetail", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x45] = "AbortTask", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x46] = "HrGetErrorData", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x47] = "Initialize", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x48] = "Uninitialize", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x49] = "Refresh", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4A] = "RescanDisks", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4B] = "RefreshFileSys", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4C] = "SecureSystemPartition", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4D] = "ShutDownSystem", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4E] = "EnumAccessPath", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4F] = "EnumAccessPathForVolume", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x50] = "AddAccessPath", ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x51] = "DeleteAccessPath", # IVolumeClient2 - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] ["4bdafc52-fe6a-11d2-93f8-00105a11164a",0x03] = "GetMaxAdjustedFreeSpace", # IVolumeClient3 - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x03] = "EnumDisksEx", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x04] = "EnumDiskRegionsEx", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x05] = "CreatePartition", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x06] = "CreatePartitionAssignAndFormat", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x07] = "CreatePartitionAssignandFormatEx", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x08] = "DeletePartition", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x09] = "InitializeDiskStyle", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0A] = "MarkActivePartition", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0B] = "Eject", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0C] = "Opnum12NotUsedOnWire", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0D] = "FTEnumVolumes", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0E] = "FTEnumLogicalDiskMembers", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0F] = "FTDeleteVolume", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x10] = "FTBreakMirror", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x11] = "FTResyncMirror", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x12] = "FTRegenerateParityStripe", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x13] = "FTReplaceMirrorPartition", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x14] = "FTReplaceParityStripePartition", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x15] = "EnumDriveLetters", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x16] = "AssignDriveLetter", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x17] = "FreeDriveLetter", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x18] = "EnumLocalFileSystems", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x19] = "GetInstalledFileSystems", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1A] = "Format", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1B] = "EnumVolumes", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1C] = "EnumVolumeMembers", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1D] = "CreateVolume", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1E] = "CreateVolumeAssignAndFormat", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1F] = "CreateVolumeAssignAndFormatEx", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x20] = "GetVolumeMountName", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x21] = "GrowVolume", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x22] = "DeleteVolume", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x23] = "CreatePartitionsForVolume", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x24] = "DeletePartitionsForVolume", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x25] = "GetMaxAdjustedFreeSpace", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x26] = "AddMirror", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x27] = "RemoveMirror", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x28] = "SplitMirror", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x29] = "InitializeDiskEx", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2A] = "UninitializeDisk", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2B] = "ReConnectDisk", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2C] = "ImportDiskGroup", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2D] = "DiskMergeQuery", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2E] = "DiskMerge", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2F] = "ReAttachDisk", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x30] = "ReplaceRaid5Column", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x31] = "RestartVolume", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x32] = "GetEncapsulateDiskInfoEx", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x33] = "EncapsulateDiskEx", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x34] = "QueryChangePartitionNumbers", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x35] = "DeletePartitionNumberInfoFromRegistry", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x36] = "SetDontShow", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x37] = "GetDontShow", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x38] = "Opnum56NotUsedOnWire", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x39] = "Opnum57NotUsedOnWire", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3A] = "Opnum58NotUsedOnWire", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3B] = "Opnum59NotUsedOnWire", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3C] = "Opnum60NotUsedOnWire", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3D] = "Opnum61NotUsedOnWire", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3E] = "Opnum62NotUsedOnWire", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3F] = "Opnum63NotUsedOnWire", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x40] = "EnumTasks", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x41] = "GetTaskDetail", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x42] = "AbortTask", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x43] = "HrGetErrorData", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x44] = "Initialize", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x45] = "Uninitialize", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x46] = "Refresh", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x47] = "RescanDisks", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x48] = "RefreshFileSys", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x49] = "SecureSystemPartition", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x4A] = "ShutDownSystem", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x4B] = "EnumAccessPath", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x4C] = "EnumAccessPathForVolume", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x4D] = "AddAccessPath", ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x4E] = "DeleteAccessPath", # IVolumeClient4 - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] ["deb01010-3a37-4d26-99df-e2bb6ae3ac61",0x03] = "RefreshEx", ["deb01010-3a37-4d26-99df-e2bb6ae3ac61",0x04] = "GetVolumeDeviceName", # IVssDifferentialSoftwareSnapshotMgmt - MSDN Ref: Shadow Copy Mgmt Protocol [ms-scmp] ["214a0f28-b737-4026-b847-4f9e37d79529",0x03] = "AddDiffArea", ["214a0f28-b737-4026-b847-4f9e37d79529",0x04] = "ChangeDiffAreaMaximizeSize", ["214a0f28-b737-4026-b847-4f9e37d79529",0x05] = "QueryVolumesSupportedForDiffAreas", ["214a0f28-b737-4026-b847-4f9e37d79529",0x06] = "QueryDiffAreasForVolume", ["214a0f28-b737-4026-b847-4f9e37d79529",0x07] = "QueryDiffAreaOnVolume", ["214a0f28-b737-4026-b847-4f9e37d79529",0x08] = "Opnum08NotUsedOnWire", # IVssEnumMgmtObject - MSDN Ref: Shadow Copy Mgmt Protocol [ms-scmp] ["01954e6b-9254-4e6e-808c-c9e05d007696",0x03] = "Next", ["01954e6b-9254-4e6e-808c-c9e05d007696",0x04] = "Skip", ["01954e6b-9254-4e6e-808c-c9e05d007696",0x05] = "Reset", ["01954e6b-9254-4e6e-808c-c9e05d007696",0x06] = "Clone", # IVssEnumObject - MSDN Ref: Shadow Copy Mgmt Protocol [ms-scmp] ["ae1c7110-2f60-11d3-8a39-00c04f72d8e3",0x03] = "Next", ["ae1c7110-2f60-11d3-8a39-00c04f72d8e3",0x04] = "Skip", ["ae1c7110-2f60-11d3-8a39-00c04f72d8e3",0x05] = "Reset", ["ae1c7110-2f60-11d3-8a39-00c04f72d8e3",0x06] = "Clone", # IVssSnapshotMgmt - MSDN Ref: Shadow Copy Mgmt Protocol [ms-scmp] ["fa7df749-66e7-4986-a27f-e2f04ae53772",0x03] = "GetProviderMgmtInterface", ["fa7df749-66e7-4986-a27f-e2f04ae53772",0x04] = "QueryVolumesSupportedForSnapshots", ["fa7df749-66e7-4986-a27f-e2f04ae53772",0x05] = "QuerySnapshotsByVolume", # IWamAdmin - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] ["29822ab7-f302-11d0-9953-00c04fd919c1",0x03] = "AppCreate", ["29822ab7-f302-11d0-9953-00c04fd919c1",0x04] = "AppDelete", ["29822ab7-f302-11d0-9953-00c04fd919c1",0x05] = "AppUnLoad", ["29822ab7-f302-11d0-9953-00c04fd919c1",0x06] = "AppGetStatus", ["29822ab7-f302-11d0-9953-00c04fd919c1",0x07] = "AppDeleteRecoverable", ["29822ab7-f302-11d0-9953-00c04fd919c1",0x08] = "AppRecover", # IWamAdmin2 - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] ["29822ab8-f302-11d0-9953-00c04fd919c1",0x09] = "AppCreate2", # IWRMAccounting - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x07] = "CreateAccountingDb", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x08] = "GetAccountingMetadata", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x09] = "ExecuteAccountingQuery", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0A] = "GetRawAccountingData", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0B] = "GetNextAccountingDataBatch", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0C] = "DeleteAccountingData", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0D] = "DefragmentDB", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0E] = "CancelAccountingQuery", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0F] = "RegisterAccountingClient", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x10] = "DumpAccountingData", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x11] = "GetAccountingClients", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x12] = "SetAccountingClientStatus", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x13] = "CheckAccountingConnection", ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x14] = "SetClientPermissions", # IWRMCalendar - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x07] = "GetCalendarInfo", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x08] = "CreateCalendar", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x09] = "ModifyCalendar", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0A] = "DeleteCalendar", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0B] = "RenameCalendar", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0C] = "ComputeEvents", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0D] = "GetScheduleInfo", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0E] = "CreateSchedule", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0F] = "ModifySchedule", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x10] = "DeleteSchedule", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x11] = "RenameSchedule", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x12] = "MoveBeforeCalendar", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x13] = "MoveAfterCalendar", ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x14] = "GetServerTimeZone", # IWRMConfig - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] ["21546ae8-4da5-445e-987f-627fea39c5e8",0x07] = "GetConfig", ["21546ae8-4da5-445e-987f-627fea39c5e8",0x08] = "SetConfig", ["21546ae8-4da5-445e-987f-627fea39c5e8",0x09] = "IsEnabled", ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0A] = "EnableDisable", ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0B] = "GetExclusionList", ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0C] = "SetExclusionList", ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0D] = "WSRMActivate", ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0E] = "IsWSRMActivated", ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0F] = "RestoreExclusionList", # IWRMMachineGroup - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x07] = "CreateMachineGroup", ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x08] = "GetMachineGroupInfo", ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x09] = "ModifyMachineGroup", ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0A] = "DeleteMachineGroup", ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0B] = "RenameMachineGroup", ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0C] = "AddMachine", ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0D] = "GetMachineInfo", ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0E] = "ModifyMachineInfo", ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0F] = "DeleteMachine", # IWRMPolicy - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x07] = "GetPolicyInfo", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x08] = "CreatePolicy", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x09] = "ModifyPolicy", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0A] = "DeletePolicy", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0B] = "RenameAllocationPolicy", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0C] = "MoveBefore", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0D] = "MoveAfter", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0E] = "SetCalDefaultPolicyName", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0F] = "GetCalDefaultPolicyName", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x10] = "GetProcessList", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x11] = "GetCurrentPolicy", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x12] = "SetCurrentPolicy", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x13] = "GetCurrentStateAndActivePolicyName", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x14] = "GetConditionalPolicy", ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x15] = "SetConditionalPolicy", # IWRMProtocol - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] ["f31931a9-832d-481c-9503-887a0e6a79f0",0x07] = "GetSupportedClient", # IWRMRemoteSessionMgmt - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] ["fc910418-55ca-45ef-b264-83d4ce7d30e0",0x07] = "GetRemoteUserCategories", ["fc910418-55ca-45ef-b264-83d4ce7d30e0",0x08] = "SetRemoteUserCategories", ["fc910418-55ca-45ef-b264-83d4ce7d30e0",0x09] = "RefreshRemoteSessionWeights", # IWRMResourceGroup - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] ["bc681469-9dd9-4bf4-9b3d-709f69efe431",0x07] = "GetResourceGroupInfo", ["bc681469-9dd9-4bf4-9b3d-709f69efe431",0x08] = "ModifyResourceGroup", ["bc681469-9dd9-4bf4-9b3d-709f69efe431",0x09] = "CreateResourceGroup", ["bc681469-9dd9-4bf4-9b3d-709f69efe431",0x0A] = "DeleteResourceGroup", ["bc681469-9dd9-4bf4-9b3d-709f69efe431",0x0B] = "RenameResourceGroup", # locator - MSDN Ref: RPC Location Services Extensions [ms-rpcl] ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x00] = "I_nsi_lookup_begin", ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x01] = "I_nsi_lookup_done", ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x02] = "I_nsi_lookup_next", ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x03] = "I_nsi_entry_object_inq_next", ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x04] = "I_nsi_ping_locator", ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x05] = "I_nsi_entry_object_inq_done", ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x06] = "I_nsi_entry_object_inq_begin", # lsacap - MSDN Ref: Central Access Policy Identifier Retreival Protocol [ms-capr] ["afc07e2e-311c-4435-808c-c483ffeec7c9",0x00] = "LsarGetAvailableCAPIDs", # NetEventForwarder - MSDN Ref: Live Remote Event Capture Protocol [ms-lrec] ["22e5386d-8b12-4bf0-b0ec-6a1ea419e366",0x00] = "RpcNetEventOpenSession", ["22e5386d-8b12-4bf0-b0ec-6a1ea419e366",0x01] = "RpcNetEventReceiveData", ["22e5386d-8b12-4bf0-b0ec-6a1ea419e366",0x02] = "RpcNetEventCloseSession", # NtFrsApi - MSDN Ref: File Replication Service Protocol [ms-frs1] ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x00] = "Opnum0NotUsedOnWire", ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x01] = "Opnum1NotUsedOnWire", ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x02] = "Opnum2NotUsedOnWire", ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x03] = "Opnum3NotUsedOnWire", ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x04] = "NtFrsApi_Rpc_Set_DsPollingIntervalW", ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x05] = "NtFrsApi_Rpc_Get_DsPollingIntervalW", ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x06] = "Opnum6NotUsedOnWire", ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x07] = "NtFrsApi_Rpc_InfoW", ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x08] = "NtFrsApi_Rpc_IsPathReplicated", ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x09] = "NtFrsApi_Rpc_WriterCommand", ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x0A] = "NtFrsApi_Rpc_ForceReplication", # RCMListener - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] ["497d95a6-2d27-4bf5-9bbd-a6046957133c",0x00] = "RpcOpenListener", ["497d95a6-2d27-4bf5-9bbd-a6046957133c",0x01] = "RpcCloseListener", ["497d95a6-2d27-4bf5-9bbd-a6046957133c",0x02] = "RpcStopListener", ["497d95a6-2d27-4bf5-9bbd-a6046957133c",0x03] = "RpcStartListener", ["497d95a6-2d27-4bf5-9bbd-a6046957133c",0x04] = "RpcIsListening", # RCMPublic - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x00] = "RpcGetClientData", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x01] = "RpcGetConfigData", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x02] = "RpcGetProtocolStatus", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x03] = "RpcGetLastInputTime", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x04] = "RpcGetRemoteAddress", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x05] = "Opnum5NotUsedOnWire", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x06] = "Opnum6NotUsedOnWire", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x07] = "Opnum7NotUsedOnWire", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x08] = "RpcGetAllListeners", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x09] = "RpcGetSessionProtocolLastInputTime", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x0A] = "RpcGetUserCertificates", ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x0B] = "RpcQuerySessionData", # RemoteFW - MSDN Ref: Firewall and Advanced Security Protocol [ms-fasp] ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x00] = "RRPC_FWOpenPolicyStore", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x01] = "RRPC_FWClosePolicyStore", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x02] = "RRPC_FWRestoreDefaults", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x03] = "RRPC_FWGetGlobalConfig", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x04] = "RRPC_FWSetGlobalConfig", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x05] = "RRPC_FWAddFirewallRule", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x06] = "RRPC_FWSetFirewallRule", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x07] = "RRPC_FWDeleteFirewallRule", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x08] = "RRPC_FWDeleteAllFirewallRules", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x09] = "RRPC_FWEnumFirewallRules", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0A] = "RRPC_FWGetConfig", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0B] = "RRPC_FWSetConfig", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0C] = "RRPC_FWAddConnectionSecurityRule", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0D] = "RRPC_FWSetConnectionSecurityRule", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0E] = "RRPC_FWDeleteConnectionSecurityRule", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0F] = "RRPC_FWEnumConnectionSecurityRules", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x10] = "RRPC_FWEnumConnectionSecurityRules", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x11] = "RRPC_FWAddAuthenticationSet", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x12] = "RRPC_FWSetAuthenticationSet", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x13] = "RRPC_FWDeleteAuthenticationSet", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x14] = "RRPC_FWDeleteAllAuthenticationSets", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x15] = "RRPC_FWEnumAuthenticationSets", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x16] = "RRPC_FWAddCryptoSet", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x17] = "RRPC_FWSetCryptoSet", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x18] = "RRPC_FWDeleteCryptoSet", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x19] = "RRPC_FWDeleteAllCryptoSets", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1A] = "RRPC_FWEnumCryptoSets", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1B] = "RRPC_FWEnumPhase1SAs", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1C] = "RRPC_FWEnumPhase2SAs", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1D] = "RRPC_FWDeletePhase1SAs", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1E] = "RRPC_FWDeletePhase2SAs", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1F] = "RRPC_FWEnumProducts", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x20] = "RRPC_FWAddMainModeRule", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x21] = "RRPC_FWSetMainModeRule", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x22] = "RRPC_FWDeleteMainModeRule", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x23] = "RRPC_FWDeleteAllMainModeRules", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x24] = "RRPC_FWEnumMainModeRules", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x25] = "RRPC_FWQueryFirewallRules", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x26] = "RRPC_FWQueryConnectionSecurityRules", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x27] = "RRPC_FWQueryMainModeRules", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x28] = "RRPC_FWQueryAuthenticationSets", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x29] = "RRPC_FWQueryCryptoSets", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2A] = "RRPC_FWEnumNetworks", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2B] = "RRPC_FWEnumAdapters", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2C] = "RRPC_FWGetGlobalConfig2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2D] = "RRPC_FWGetConfig2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2E] = "RRPC_FWAddFirewallRule2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2F] = "RRPC_FWSetFirewallRule2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x30] = "RRPC_FWEnumFirewallRules2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x31] = "RRPC_FWAddConnectionSecurityRule2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x32] = "RRPC_FWSetConnectionSecurityRule2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x33] = "RRPC_FWEnumConnectionSecurityRules2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x34] = "RRPC_FWAddAuthenticationSet2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x35] = "RRPC_FWSetAuthenticationSet2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x36] = "RRPC_FWEnumAuthenticationSets2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x37] = "RRPC_FWAddCryptoSet2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x38] = "RRPC_FWSetCryptoSet2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x39] = "RRPC_FWEnumCryptoSets2_10", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3A] = "RRPC_FWAddConnectionSecurityRule2_20", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3B] = "RRPC_FWSetConnectionSecurityRule2_20", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3C] = "RRPC_FWEnumConnectionSecurityRules2_20", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3D] = "RRPC_FWQueryConnectionSecurityRules2_20", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3E] = "RRPC_FWAddAuthenticationSet2_20", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3F] = "RRPC_FWEnumAuthenticationSets2_20", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x40] = "RRPC_FWQueryAuthenticationSets2_20", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x41] = "RRPC_FWAddFirewallRule2_20", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x42] = "RRPC_FWSetFirewallRule2_20", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x43] = "RRPC_FWEnumFirewallRules2_20", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x45] = "RRPC_FWQueryFirewallRules2_20", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x46] = "RRPC_FWAddFirewallRule2_24", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x47] = "RRPC_FWSetFirewallRule2_24", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x48] = "RRPC_FWEnumFirewallRules2_24", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x49] = "RRPC_FWQueryFirewallRules2_24", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4A] = "RRPC_FWAddFirewallRule2_25", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4B] = "RRPC_FWSetFirewallRule2_25", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4C] = "RRPC_FWEnumFirewallRules2_25", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4D] = "RRPC_FWQueryFirewallRules2_25", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4E] = "RRPC_FWAddFirewallRule2_26", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4F] = "RRPC_FWSetFirewallRule2_26", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x50] = "RRPC_FWEnumFirewallRules2_26", ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x51] = "RRPC_FWQueryFirewallRules2_26", # remotesp - MSDN Ref: Telephony Remote Protocol [ms-trp] ["2f5f6521-ca47-1068-b319-00dd010662db",0x00] = "RemoteSPAttach", ["2f5f6521-ca47-1068-b319-00dd010662db",0x01] = "RemoteSPEventProc", ["2f5f6521-ca47-1068-b319-00dd010662db",0x02] = "RemoteSPDetach", # SessEnvPublicRpc - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] ["1257b580-ce2f-4109-82d6-a9459d0bf6bc",0x00] = "RpcShadow2", # ssdpsrv - Marchand Ref: Simple Service Discovery Protocol (SSDP) [ssdp] ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x00] = "RegisterServiceRpc", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x01] = "DeregisterServiceRpcByUSN", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x02] = "DeregisterServiceRpc", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x03] = "UpdateCacheRpc", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x04] = "LookupCacheRpc", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x05] = "CleanupCacheRpc", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x06] = "InitializeSyncHandle", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x07] = "RemoveSyncHandle", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x08] = "RegisterNotificationRpc", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x09] = "GetNotificationRpc", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0A] = "WakeupGetNotificationRpc", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0B] = "DeregisterNotificationRpc", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0C] = "EnableDeviceHost", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0D] = "DisableDeviceHost", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0E] = "SetICSInterfaces", ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0F] = "SetICSOff", # tapsrv - MSDN Ref: Telephony Remote Protocol [ms-trp] ["2f5f6520-ca46-1067-b319-00dd010662da",0x00] = "ClientAttach", ["2f5f6520-ca46-1067-b319-00dd010662da",0x01] = "ClientRequest", ["2f5f6520-ca46-1067-b319-00dd010662da",0x02] = "ClientDetach", # TermServEnumeration - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x00] = "RpcOpenEnum", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x01] = "RpcCloseEnum", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x02] = "RpcFilterByState", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x03] = "RpcFilterByCallersName", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x04] = "RpcEnumAddFilter", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x05] = "RpcGetEnumResult", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x06] = "RpcFilterBySessionType", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x07] = "Opnum7NotUsedOnWire", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x08] = "RpcGetSessionIds", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x09] = "RpcGetEnumResultEx", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x0A] = "RpcGetAllSessions", ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x0B] = "RpcGetAllSessionsEx", # TermServNotification - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] ["11899a43-2b68-4a76-92e3-a3d6ad8c26ce",0x00] = "RpcWaitForSessionState", ["11899a43-2b68-4a76-92e3-a3d6ad8c26ce",0x01] = "RpcRegisterAsyncNotification", ["11899a43-2b68-4a76-92e3-a3d6ad8c26ce",0x02] = "RpcWaitAsyncNotification", ["11899a43-2b68-4a76-92e3-a3d6ad8c26ce",0x03] = "RpcUnRegisterAsyncNotification", # TermSrvSession - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] ["484809d6-4239-471b-b5bc-61df8c23ac48",0x00] = "RpcWaitForSessionState", ["484809d6-4239-471b-b5bc-61df8c23ac48",0x01] = "RpcRegisterAsyncNotification", ["484809d6-4239-471b-b5bc-61df8c23ac48",0x02] = "RpcWaitAsyncNotification", ["484809d6-4239-471b-b5bc-61df8c23ac48",0x03] = "RpcUnRegisterAsyncNotification", # trksvr - MSDN Ref: Distributed Link Tracking: Central Manager Protocol [ms-dltm] ["4da1c422-943d-11d1-acae-00c04fc2aa3f",0x00] = "LnkSvrMessage", ["4da1c422-943d-11d1-acae-00c04fc2aa3f",0x01] = "LnkSvrMessageCallback", # trkwks - MSDN Ref: Distributed Link Tracking: Workstation Protocol [ms-dltw] ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x00] = "Opnum0NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x01] = "Opnum1NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x02] = "Opnum2NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x03] = "Opnum3NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x04] = "Opnum4NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x05] = "Opnum5NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x06] = "Opnum6NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x07] = "Opnum7NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x08] = "Opnum8NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x09] = "Opnum9NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x0A] = "Opnum10NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x0B] = "Opnum11NotUsedOnWire", ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x0C] = "LnkSearchMachine", # TsProxyRpcInterface - MSDN Ref: Terminal Services Gateway Server Protocol [ms-tsgu] ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x00] = "Opnum0NotUsedOnWire", ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x01] = "TsProxyCreateTunnel", ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x02] = "TsProxyAuthorizeTunnel", ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x03] = "TsProxyMakeTunnelCall", ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x04] = "TsProxyCreateChannel", ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x05] = "Opnum5NotUsedOnWire", ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x06] = "TsProxyCloseChannel", ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x07] = "TsProxyCloseTunnel", ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x08] = "TsProxySetupReceivePipe", ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x09] = "TsProxySendToServer", # TSVIPPublic - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] ["53b46b02-c73b-4a3e-8dee-b16b80672fc0",0x00] = "RpcGetSessionIP", # W32Time - MSDN Ref: W32Time Remote Protocol [ms-w32t] ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x00] = "W32TimeSync", ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x01] = "W32TimeGetNetlogonServiceBits", ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x02] = "W32TimeQueryProviderStatus", ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x03] = "W32TimeQuerySource", ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x04] = "W32TimeQueryProviderConfiguration", ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x05] = "W32TimeQueryConfiguration", ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x06] = "W32TimeQueryStatus", ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x07] = "W32TimeLog", # WdsRpcInterface - MSDN Ref: Windows Deployment Services Control Protocol [ms-wdsc] ["1a927394-352e-4553-ae3f-7cf4aafca620",0x00] = "WdsRpcMessage", # winsi2 - MSDN Ref: Remote Administrative Interface: WINS [ms-raiw] ["811109bf-a4e1-11d1-ab54-00a0c91e9b45",0x00] = "R_WinsTombstoneDbRecs", ["811109bf-a4e1-11d1-ab54-00a0c91e9b45",0x01] = "R_WinsCheckAccess", # Witness - MSDN Ref: Service Witness Protocol [ms-swn] ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28",0x00] = "WitnessrGetInterfaceList", ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28",0x01] = "WitnessrRegister", ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28",0x02] = "WitnessrUnRegister", ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28",0x03] = "WitnessrAsyncNotify", ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28",0x04] = "WitnessrRegisterEx", } &redef; } #end bzar_dce-rpc_consts.zeek