ATT&CKProcedure examples

Procedure examples

Real-world descriptions of how a group, tool or campaign used a technique.

Technique: T1018×

54 examples

TechniqueUsed byProcedure example
T1018
Remote System Discovery
ToolPing

Ping can be used to identify remote systems within a network.

T1018
Remote System Discovery
ToolCrackMapExec

CrackMapExec can discover active IP addresses, along with the machine name, within a targeted network.

T1018
Remote System Discovery
ToolAdFind

AdFind has the ability to query Active Directory for computers.

T1018
Remote System Discovery
MalwareCanisterWorm

CanisterWorm has scanned the local /24 subnet for new targets.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.