Network Discovery Enumeration Commands Executed Post-Compromise

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•2

Detects a host performing multiple distinct network reconnaissance commands in a short period, which is indicative of an attacker profiling the network configuration and environment of a compromised system.