H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Tool

ipconfig

[ipconfig](https://attack.mitre.org/software/S0100) is a Windows utility that can be used to find information about a system's TCP/IP, DNS, DHCP, and adapter configuration. (Citation: TechNet Ipconfig)

Tool
TypeTool
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[ipconfig](https://attack.mitre.org/software/S0100) is a Windows utility that can be used to find information about a system's TCP/IP, DNS, DHCP, and adapter configuration. (Citation: TechNet Ipconfig)

Labels

tool
16 recorded

Relationships

uses
from admin@338
Group
uses
from APT1
Group
uses
from APT29
Group
uses
from APT32
Group
uses
from APT41
Group
uses
from FunnyDream
Campaign
uses
from GALLIUM
Group
uses
from HEXANE
Group
uses
to System Network Configuration Discovery
Technique
uses
from Ke3chang
Group
uses
from Magic Hound
Group
uses
from MirrorFace
Group
uses
from OilRig
Group
uses
from Orangeworm
Group
uses
from Threat Group-3390
Group
uses
from Volt Typhoon
Group
2 external

References

mitre-attack
S0100
open
TechNet Ipconfig
https://technet.microsoft.com/en-us/library/bb490921.aspx
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance