Discovery of Network Environment via Built-in Tools¶
Built-in tools can be used to enumerate and discover network environment on windows systems.
| id: | 3a78a9fb-3714-43fa-90ca-7cf85da5a710 |
|---|---|
| categories: | enrich |
| confidence: | low |
| os: | windows |
| created: | 7/26/2019 |
| updated: | 7/26/2019 |
Query¶
process where subtype.create and
process_name in ("ipconfig.exe", "route.exe", "nbtstat.exe", "arp.exe")
| unique command_line