Edit Threat

Name

Category

Tags (comma-separated)

Description Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping, net view using Net, or, on ESXi servers, esxcli network diag ping. Adversaries may also analyze data from local host files (ex: C:\Windows\System32\Drivers\etc\hos