The sub-techniques beta is now live! Read the release blog post for more info.

nbtstat

nbtstat is a utility used to troubleshoot NetBIOS name resolution. [1]

ID: S0102
Associated Software: nbtstat.exe
Type: TOOL
Platforms: Windows
Version: 1.0
Created: 31 May 2017
Last Modified: 17 October 2018

Techniques Used

Domain ID Name Use
Enterprise T1016 System Network Configuration Discovery

nbtstat can be used to discover local NetBIOS domain names.

Enterprise T1049 System Network Connections Discovery

nbtstat can be used to discover current NetBIOS sessions.

Groups That Use This Software

ID Name References
G0010 Turla [2]

References