netstat

netstat is an operating system utility that displays active TCP connections, listening ports, and network statistics. [1]

ID: S0104
Type: TOOL
Version: 1.0
Created: 31 May 2017
Last Modified: 17 October 2018

Techniques Used

Domain ID Name Use
Enterprise T1049 System Network Connections Discovery

netstat can be used to enumerate local network connections, including active TCP connections and other network statistics.[1]

Groups That Use This Software

ID Name References
G0018 admin@338

[2]

G0004 Ke3chang

[3][4]

G0116 Operation Wocao

[5]

G0096 APT41

[6]

G0049 OilRig

[7][8]

G0010 Turla

[9]

G0071 Orangeworm

[10]

G0027 Threat Group-3390

[11]

References