netsh
- ID
- S0108
- Type
- Tool
- Associated names
- netsh.exe
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 26 Feb 2025
netsh is a scripting utility used to interact with networking components on local or remote systems. [1]
Techniques used (4)
- T1090 Proxy
- T1518.001 Security Software Discovery
- T1546.007 Netsh Helper DLL
- T1686 Disable or Modify System Firewall
Groups using it (7)
- G0008 Carbanak
- G0019 Naikon
- G0032 Lazarus Group
- G0035 Dragonfly
- G0050 APT32
- G0059 Magic Hound
- G1017 Volt Typhoon