host-interaction/network/address
# generated using capa explorer for IDA Pro
rule:
meta:
name: monitor local IPv4 address changes
namespace: host-interaction/network/address
authors:
- michael.hunhoff@mandiant.com
scopes:
static: basic block
dynamic: call
att&ck:
- Discovery::System Network Configuration Discovery [T1016]
features:
- and:
- api: iphlpapi.NotifyAddrChange
last edited: 2023-11-24 10:35:00