Rule Info
Name
Internet Connection Discovery
Author
Swachchhanda Shrawan Poudel (Nextron Systems)
Description
Detects attempts to check internet connectivity to common destinations using ping or tracert commands.
After a compromise, threat actors may use these commands to verify internet access or to check for network restrictions.
Date
2025-04-18 00:00:00
Modified
None
Id
4a5f7c89-1234-4567-89ab-cdef01234567
Tags
attack.discovery attack.t1016.001
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR