Tool
tool:nbtscan
Also: NetBIOS scanner, nbt.exe
Network scanner used to scan public IP ranges for NetBIOS and shared-drive exposure.
Network scanner used to scan public IP ranges for NetBIOS and shared-drive exposure.
“It was called nbt.exe which is a tool. It’s a legitimate tool called NBTscan.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | NetBIOS | Explicit | 103 |
| incoming | USES | Cloud Hopper | Explicit | 103 |
Cloud Hopper USES NBTscan
The attackers used NBTscan to scan public IP ranges for NetBIOS file-sharing connections.
Explicit Confidence 99% · Fabio Viggiani EP 103 Details
“It was a legitimate tool called NBTscan. It’s a NetBIOS main network scanner.”
NBTscan was used as a NetBIOS network scanner.
Explicit Confidence 99% · Fabio Viggiani EP 103 Details
“NBTscan. It’s a NetBIOS main network scanner.”