---
id: 1702
title: "Introducing RPC Investigator"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2023/01/17/rpc-investigator-microsoft-windows-remote-procedure-call/"
published_at: "2023-01-17T13:00:06Z"
tags: ["windows", "security-tools", "research", "trail-of-bits", "rpc", "ntapidotnet"]
phying_url: "https://phying.com/item/1702"
lang: en
---

# Introducing RPC Investigator

## Summary

Trail of Bits released RPC Investigator, a .NET tool built on NtApiDotNet to enumerate, decompile, and talk to Windows RPC servers, adding visualization and ETW-based traffic sniffing.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2023-01-17T13:00:06Z
- **Original:** https://blog.trailofbits.com/2023/01/17/rpc-investigator-microsoft-windows-remote-procedure-call/
- **Phying News:** https://phying.com/item/1702