Skip to content

S0102 nbtstat

nbtstat is a utility used to troubleshoot NetBIOS name resolution. 1

Item Value
ID S0102
Type TOOL
Version 1.0
Created 31 May 2017
Last Modified 17 October 2018
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
enterprise T1016 System Network Configuration Discovery nbtstat can be used to discover local NetBIOS domain names.
enterprise T1049 System Network Connections Discovery nbtstat can be used to discover current NetBIOS sessions.

Groups That Use This Software

ID Name References
G0010 Turla 2

References