ATT&CKSoftwarenbtstat

nbtstat

S0102

Tool.View on attack.mitre.org

About this tool

nbtstat is a utility used to troubleshoot NetBIOS name resolution.

Techniques used2

Discovery2

T1016System Network Configuration DiscoveryT1049System Network Connections Discovery

Procedure examples2

TechniqueProcedure example
T1016
System Network Configuration Discovery

nbtstat can be used to discover local NetBIOS domain names.
T1049
System Network Connections Discovery

nbtstat can be used to discover current NetBIOS sessions.

Groups that use it2

MirrorFaceTurla

Campaigns0

None recorded.

References1

  1. TechNet Nbtstat Open source
    Microsoft. (n.d.). Nbtstat. Retrieved April 17, 2016.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.

© 2026 DetectionCode Website. All Rights Reserved.

Developed by Taher Gabr · LinkedIn