Arp

Arp displays and modifies information about a system's Address Resolution Protocol (ARP) cache. [1]

ID: S0099
Associated Software: arp.exe
Type: TOOL
Platforms: Linux, Windows, macOS
Version: 1.2
Created: 31 May 2017
Last Modified: 25 July 2023

Techniques Used

Domain ID Name Use
Enterprise T1018 Remote System Discovery

Arp can be used to display a host's ARP cache, which may include address resolutions for remote systems.[1][2]

Enterprise T1016 System Network Configuration Discovery

Arp can be used to display ARP configuration information on the host.[1]

Groups That Use This Software

Campaigns

ID Name Description
C0026 C0026

[6]

References