T1016 System Network Configuration Discovery Mappings

Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp, ipconfig/ifconfig, nbtstat, and route.

Adversaries may use the information from System Network Configuration Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.

View in MITRE ATT&CK®

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name
action.malware.variety.Scan network Scan or footprint network related-to T1016 System Network Configuration Discovery

ATT&CK Subtechniques

Technique ID Technique Name Number of Mappings
T1016.001 Internet Connection Discovery 1