Windows

Authenticated RCE

PsExec (tcp/445)

WinRM (tcp/5985,5986)

MS17-010

Physical Access

Shares (SMB/CIFS)