NBTscan
- ID
- S0590
- Type
- Tool
- Platforms
- Windows, Linux, macOS
- Source
- attack.mitre.org
- MITRE last modified
- 25 Apr 2025
NBTscan is an open source tool that has been used by state groups to conduct internal reconnaissance within a compromised network.[1][2][3][4]
Techniques used (5)
- T1016 System Network Configuration Discovery
- T1018 Remote System Discovery
- T1033 System Owner/User Discovery
- T1040 Network Sniffing
- T1046 Network Service Discovery
Groups using it (10)
- G0010 Turla
- G0027 Threat Group-3390
- G0030 Lotus Blossom
- G0087 APT39
- G0093 GALLIUM
- G0129 Mustang Panda
- G0131 Tonto Team
- G0135 BackdoorDiplomacy
- G1006 Earth Lusca
- G1030 Agrius