Tool: netsh

Description

[netsh](https://attack.mitre.org/software/S0108) is a scripting utility used to interact with networking components on local or remote systems. (Citation: TechNet Netsh)

External References

• mitre-attack
• TechNet Netsh

Techniques Used by This Tool

• T1090 — Proxy
• T1518.001 — Security Software Discovery
• T1546.007 — Netsh Helper DLL
• T1562.004 — Disable or Modify System Firewall

APT Groups Using This Tool

• Dragonfly
• Lazarus Group
• Volt Typhoon
• Magic Hound
• APT32
• Naikon
• Carbanak