ipconfig
Software · ATTACK:enterprise:S0100
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0100",
"title": "ipconfig",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0100",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "tool--294e2560-bd48-44b2-9da2-833b5588ad11",
"external_id": "S0100",
"domain": "enterprise",
"created": "2017-05-31T21:33:02.863Z",
"modified": "2026-05-12T15:12:00.740Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "TechNet Ipconfig",
"url": "https://technet.microsoft.com/en-us/library/bb490921.aspx"
}
]
}Explicit source assertions (16)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G0093 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--058ed2a0-4419-437e-9f3b-4df97f917e8f
Cybereason Soft Cell June 2019ATTACK:enterprise:G0006 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--13984eec-6c33-4bab-a22c-5c061ddd6e44
Mandiant APT1ATTACK:enterprise:G1017 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--18a2df13-e78e-46ca-9074-17c97d19ad55
Joint Cybersecurity Advisory Volt Typhoon June 2023ATTACK:enterprise:G0050 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1c01c64c-8842-44be-bd66-8355eb5d543c
Cybereason Cobalt Kitty 2017ATTACK:enterprise:G1054 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--660d5be1-468a-4a49-a026-a2da5439c964
JPCERT MirrorFace JUL 2024ATTACK:enterprise:G0096 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--694d94db-3297-4be1-ab01-7b574ee5f4e5
Group IB APT 41 June 2021ATTACK:enterprise:G0049 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--72d6fe7e-ba33-4117-8153-64226f189ed2
Palo Alto OilRig May 2016ATTACK:enterprise:C0007 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--776e6d33-8d3d-42bc-bee2-770d8399dfc4
Bitdefender FunnyDream Campaign November 2020ATTACK:enterprise:G0059 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7f32b01c-ecf6-457e-8bca-6c74c02b439e
DFIR Phosphorus November 2021 · DFIR Report APT35 ProxyShell March 2022ATTACK:enterprise:G0071 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9878ff64-0206-4a62-a5aa-3f909da87081
Symantec Orangeworm April 2018ATTACK:enterprise:S0100 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b91e06c1-9546-4184-9552-ba501bf9182e
ATTACK:enterprise:G1001 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bed01612-b213-44dc-aabc-19ea87ef28b8
ClearSky Siamesekitten August 2021 · Zscaler Lyceum DnsSystem June 2022ATTACK:enterprise:G0027 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c354d751-4688-49c5-9f9a-0d2bc705f645
SecureWorks BRONZE UNION June 2017ATTACK:enterprise:G0016 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cb1dab47-1a8e-431c-adc9-51d341ce435e
CISA SoreFang July 2016ATTACK:enterprise:G0018 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e38e741c-a7ef-420a-911a-1d2cf6abf49d
FireEye admin@338ATTACK:enterprise:G0004 → uses → ATTACK:enterprise:S0100
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f879eea1-2a05-484d-adbb-c3504813fc5d
Mandiant Operation Ke3chang November 2014 · NCC Group APT15 Alive and Strong