Skip to content

trkwks

The "trkwks" is a Remote Procedure Call (RPC) service that is available on some versions of Microsoft Windows. It stands for "Tracker Works".

The trkwks service is responsible for maintaining the list of resources shared on the network and is used by the Distributed Link Tracking service.

This service can be used to perform a variety of tasks related to network shares and resources, such as:

  • Network Share Management: The service can be used to manage network shares, query the status of shares, and create or delete shares.

  • Distributed Link Tracking: The service can be used to track and maintain links to shared resources on the network, such as files and folders.

  • File and folder management: Applications can use the service to query and manage files and folders that are shared on the network.

  • Remote Administration: The service can be used to remotely administrate the shared resources on the network.

It's worth noting that the trkwks service is typically only available on Windows systems that are running the Distributed Link Tracking service and it requires that the appropriate permissions and credentials are set on the target machine. Additionally, vulnerabilities have been found in the past in the implementation of the trkwks service, that could be exploited by attackers to achieve remote code execution, denial of service and information disclosure.