ATT&CK technique
View on MITRE ATT&CK →
T1016.001
Internet Connection Discovery
Discovery
6 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | DNS Request for IP Lookup Service via Unsigned Binary | production | 2026-09-18 |
| elastic | External IP Address Discovery via Curl | production | 2026-09-18 |
| elastic | System Public IP Discovery via DNS Query | production | 2026-09-18 |
| elastic | Enumeration Command Spawned via WMIPrvSE | production | 2026-09-18 |
| elastic | Suspicious PDF Reader Child Process | production | 2026-09-18 |
| splunk | Network Discovery Using Route Windows App | production | 2026-05-13 |