216.73.216.6

Net

The MITRE Corporation · Published 31/05/2017 23:32 · Modified 27/03/2026 01:07

Essential information

Confidence
100/100
Published
31/05/2017 23:32
Modified
27/03/2026 01:07
Revoked
No
Author / Source
The MITRE Corporation
Related entities
16 attack patterns (mitre), 33 intrusion sets (apt), 1 campaign, 1 reports, 1 campaigns

Aliases

net.exe

Description

The [Net](https://attack.mitre.org/software/S0039) utility is a component of the Windows operating system. It is used in command-line operations for control of users, groups, services, and network connections. (Citation: Microsoft Net Utility) [Net](https://attack.mitre.org/software/S0039) has a great deal of functionality, (Citation: Savill 1999) much of which is useful for an adversary, such as gathering system and network information for Discovery, moving laterally through [SMB/Windows Admin Shares](https://attack.mitre.org/techniques/T1021/002) using `net use` commands, and interacting with services. The net1.exe utility is executed for certain functionality when net.exe is run and can be used directly in commands such as `net1 user`.

Marking (TLP)

Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets, tools and other entities linked to this tool.