System Network Connections Discovery Via Net.EXE (1c67a717-32ba-409b-a45d-0fb704a73a81)
Adversaries may attempt to get a listing of network connections to or from the compromised system they are currently accessing or from remote systems by querying for information over the network.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| System Network Connections Discovery - T1049 (7e150503-88e7-4861-866b-ff1ac82c4475) | Attack Pattern | System Network Connections Discovery Via Net.EXE (1c67a717-32ba-409b-a45d-0fb704a73a81) | Sigma-Rules | 1 |