nbtstat

MITRE ATT&CK: S0102 View on attack.mitre.org

Aliases: nbtstat

Profile updated
2026-07-07 15:32:14

Context

nbtstat is a utility used to troubleshoot NetBIOS name resolution.

Detection coverage

  • 16 Sigma rules

Malware & tools used

  • System Network Configuration Discovery (attack-pattern)
  • System Network Connections Discovery (attack-pattern)

Used by threat actors

Reports & references

  • MITRE ATT&CK — S0102 (report)
  • Microsoft — Cc940106 (report)

External references