netstat
- ID
- S0104
- Type
- Tool
- Source
- attack.mitre.org
- MITRE last modified
- 12 May 2026
netstat is an operating system utility that displays active TCP connections, listening ports, and network statistics. [1]
Techniques used (1)
Groups using it (11)
- G0004 Ke3chang
- G0010 Turla
- G0018 admin@338
- G0027 Threat Group-3390
- G0049 OilRig
- G0071 Orangeworm
- G0096 APT41
- G1001 HEXANE
- G1017 Volt Typhoon
- G1022 ToddyCat
- G1023 APT5