Software: netsh, netsh.exe
From enterprise
netsh, netsh.exe | |
---|---|
Software | |
ID | S0108 |
Aliases | netsh, netsh.exe |
Type | Utility |
Platform | Windows |
netsh is a scripting utility used to interact with networking components on local or remote systems.1
Techniques Used
- Disabling Security Tools - netsh can be used to disable local firewall settings.2
- Security Software Discovery - netsh can be used to discover system firewall settings.2
- Connection Proxy - netsh can be used to set up a proxy tunnel to allow remote host access to an infected host.3
- Netsh Helper DLL - netsh can be used as a persistence proxy technique to execute a helper DLL when netsh.exe is executed.4
Groups
The following groups use this software:
References