Software: netsh, netsh.exe

From ATT&CK
Jump to: navigation, search
netsh, netsh.exe
Software
ID S0108
Aliases netsh, netsh.exe
Type Utility

netsh is a scripting utility used to interact with networking components on local or remote systems.1

Techniques Used

  • Connection Proxy - netsh can be used to set up a proxy tunnel to allow remote host access to an infected host.3
  • Netsh Helper DLL - netsh can be used as a persistence proxy technique to execute a helper DLL when netsh.exe is executed.4

Groups

The following groups use this software: