Tool: netstat

Description

[netstat](https://attack.mitre.org/software/S0104) is an operating system utility that displays active TCP connections, listening ports, and network statistics. (Citation: TechNet Netstat)

External References

• mitre-attack
• TechNet Netstat

Techniques Used by This Tool

• T1049 — System Network Connections Discovery

APT Groups Using This Tool

• OilRig
• admin@338
• Turla
• HEXANE
• Ke3chang
• Volt Typhoon
• APT5
• ToddyCat
• APT41
• Threat Group-3390
• Orangeworm