Software: Net, net.exe

From ATT&CK
Jump to: navigation, search
Net, net.exe
Software
ID S0039
Aliases Net, net.exe
Type Utility

The Net utility is a component of the Windows operating system. It is used in command-line operations for control of users, groups, services, and network connections.1

Net has a great deal of functionality,2 much of which is useful for an adversary, such as gathering system and network information for Discovery, moving laterally through Windows admin shares using net use commands, and interacting with services.

Techniques Used

  • Remote System Discovery - Commands such as net view can be used in Net to gather information about available remote systems.2
  • Account Discovery - Commands under net user can be used in Net to gather information about and manipulate user accounts.2
  • Permission Groups Discovery - Commands such as net group and net localgroup can be used in Net to gather information about and manipulate groups.2
  • Service Execution - The net start and net stop commands can be used in Net to execute or stop Windows services.2
  • System Time Discovery - The net time command can be used in Net to determine the local or remote system time.3

Groups

The following groups use this software: