netstat

S0104

Tool.View on attack.mitre.org

About this tool

netstat is an operating system utility that displays active TCP connections, listening ports, and network statistics.

Techniques used1

Procedure examples1

TechniqueProcedure example
T1049
System Network Connections Discovery

netstat can be used to enumerate local network connections, including active TCP connections and other network statistics.

Groups that use it11

Campaigns4

References1

  1. TechNet Netstat Open source
    Microsoft. (n.d.). Netstat. Retrieved April 17, 2016.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.