1. Home
  2. Software
  3. nbtstat

nbtstat

nbtstat is a utility used to troubleshoot NetBIOS name resolution. [1]

ID: S0102
ⓘ
Type: TOOL
Version: 1.0
Created: 31 May 2017
Last Modified: 17 October 2018
Enterprise Layer
download view

Techniques Used

Domain ID Name Use
Enterprise T1049 系统网络连接发现

nbtstat can be used to discover current NetBIOS sessions.
Enterprise T1016 系统网络配置发现

nbtstat can be used to discover local NetBIOS domain names.

Groups That Use This Software

ID Name References
G0010 Turla

[2]

References

  1. Microsoft. (n.d.). Nbtstat. Retrieved April 17, 2016.
  1. Kaspersky Lab's Global Research and Analysis Team. (2014, August 7). The Epic Turla Operation: Solving some of the mysteries of Snake/Uroburos. Retrieved December 11, 2014.