Possible network service discovery via command-line tool

Synopsis

Field	Value
Activation Period	14 Days
Training Period	30 Days
Test Period	N/A (single event)
Deduplication Period	6 Hours
Required Data	XDR Agent
ATT&CK Tactic	Discovery (TA0007)
ATT&CK Technique	Network Service Discovery (T1046)
Severity	Low

Description

An attacker may use command-line utilities to discover open ports and services on a remote host.

Attacker's Goals

Unavailable.

Investigative actions

Unavailable.