# Software: Net, net.exe

Net, net.exe
Software
ID S0039
Aliases Net, net.exe
Type Utility

The Net utility is a component of the Windows operating system. It is used in command-line operations for control of users, groups, services, and network connections.1

Net has a great deal of functionality,2 much of which is useful for an adversary, such as gathering system and network information for Discovery, moving laterally through Windows admin shares using net use commands, and interacting with services.

## Techniques Used

• Remote System Discovery - Commands such as net view can be used in Net to gather information about available remote systems.2
• System Network Connections Discovery - Commands such as net use and net session can be used in Net to gather information about network connections from a particular host.2
• Account Discovery - Commands under net user can be used in Net to gather information about and manipulate user accounts.2
• Permission Groups Discovery - Commands such as net group and net localgroup can be used in Net to gather information about and manipulate groups.2
• System Service Discovery - The net start command can be used in Net to find information about Windows services.2
• Service Execution - The net start and net stop commands can be used in Net to execute or stop Windows services.2
• System Time Discovery - The net time command can be used in Net to determine the local or remote system time.3
• Network Share Connection Removal - The net use \\system\share /delete command can be used in Net to remove an established connection to a network share.4
• Network Share Discovery - The net view \\remotesystem and net share commands in Net can be used to find shared drives and directories on remote and local systems respectively.2
• Create Account - The net user username \password and net user username \password \domain commands in Net can be used to create a local or domain account respectively.2

## Groups

The following groups use this software: