Carrie Roberts
1bfefdacfc
* provide elevation_required attribute * provide elevation_required attribute * provide elevation_required attribute
48 lines
896 B
YAML
48 lines
896 B
YAML
---
|
|
attack_technique: T1049
|
|
display_name: System Network Connections Discovery
|
|
|
|
atomic_tests:
|
|
- name: System Network Connections Discovery
|
|
description: |
|
|
Get a listing of network connections.
|
|
|
|
supported_platforms:
|
|
- windows
|
|
|
|
executor:
|
|
name: command_prompt
|
|
elevation_required: false
|
|
command: |
|
|
netstat
|
|
net use
|
|
net sessions
|
|
|
|
- name: System Network Connections Discovery with PowerShell
|
|
description: |
|
|
Get a listing of network connections.
|
|
|
|
supported_platforms:
|
|
- windows
|
|
|
|
executor:
|
|
name: powershell
|
|
elevation_required: false
|
|
command: |
|
|
Get-NetTCPConnection
|
|
|
|
- name: System Network Connections Discovery Linux & MacOS
|
|
description: |
|
|
Get a listing of network connections.
|
|
|
|
supported_platforms:
|
|
- linux
|
|
- macos
|
|
|
|
executor:
|
|
name: sh
|
|
elevation_required: false
|
|
command: |
|
|
netstat
|
|
who -a
|