Arp

S0099

Tool.View on attack.mitre.org

About this tool

Arp displays and modifies information about a system's Address Resolution Protocol (ARP) cache.

Techniques used2

Procedure examples2

TechniqueProcedure example
T1016
System Network Configuration Discovery

Arp can be used to display ARP configuration information on the host.

T1018
Remote System Discovery

Arp can be used to display a host's ARP cache, which may include address resolutions for remote systems.

Groups that use it4

Campaigns3

References1

  1. TechNet Arp Open source
    Microsoft. (n.d.). Arp. Retrieved April 17, 2016.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.