Home >
Enterprise >
Participants >
Micro Focus >
Remote System Discovery (T1018)
|
|
See technique results for:
Carbanak+FIN7 |
||||||
Step | ATT&CK Pattern |
|
||||
4.A.2
|
Tactic Discovery (TA0007) |
|
||||
5.B.7
![]() |
Tactic Discovery (TA0007) |
|
||||
6.A.2
|
Tactic Discovery (TA0007) |
|
||||
15.A.8
|
Tactic Discovery (TA0007) |
|
Criteria
powershell.exe executes Get-NetComputer to query LDAP (port 389) via a network connection to 10.0.0.4