Discover Systems Recently Accessed By Compromised Machine

Windows

1. arp -a
2. netstat -an
3. ipconfig /displaydns

Linux

1. ss -t state established
2. ip n
3. arp -a
4. netstat -ntau

Related

Related Notes

All Related Notes

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "pivoting") OR contains(tags, "enumeration") OR contains(tags, "gaining-acess") OR contains(tags, "network")
SORT file.ctime DESC

pivoting

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "pivoting")
SORT file.ctime DESC

enumeration

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "enumeration")
SORT file.ctime DESC

gaining-acess

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "gaining-acess")
SORT file.ctime DESC

network

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "network")
SORT file.ctime DESC