Files
atomic-red-team/atomics/T1016/T1016.yaml
T
Carrie Roberts 1bfefdacfc Add elevated (#542)
* provide elevation_required attribute

* provide elevation_required attribute

* provide elevation_required attribute
2019-09-03 07:34:42 -06:00

38 lines
755 B
YAML

---
attack_technique: T1016
display_name: System Network Configuration Discovery
atomic_tests:
- name: System Network Configuration Discovery
description: |
Identify network configuration information
supported_platforms:
- windows
executor:
name: command_prompt
elevation_required: false
command: |
ipconfig /all
netsh interface show
arp -a
nbtstat -n
net config
- name: System Network Configuration Discovery
description: |
Identify network configuration information
supported_platforms:
- macos
- linux
executor:
name: sh
elevation_required: false
command: |
arp -a
netstat -ant | awk '{print $NF}' | grep -v '[a-z]' | sort | uniq -c
ifconfig