ScanLine
- Profile updated
- 2026-07-07 15:19:15
Context
According to CISA, this is a command-line port scanning utility from Foundstone. It is used to scan for open UDP and TCP ports, grab banners from open ports, resolve IP addresses to host names, and bind to specified ports and IP addresses.
Detection coverage
- 2 YARA rules
Detection rules
- SEKOIA_Tool_Scanline_Strings (yara-rule)
- MALPEDIA_Win_Scanline_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Scanline (report)
- CISA — Aa24 038A (report)
- CISA — Ar24 038A (report)