Test-Connection

PowerShell reconnaissance T1018

Send ICMP echo requests (ping). Used for host discovery and network reconnaissance within PowerShell scripts.

Binary Paths

  • PowerShell cmdlet

Glob Patterns

Pattern Notes
& (gcm T*-C*n) -ComputerName 192.168.1.1
Wildcards in both verb and noun
& (gcm Test-Con*) -ComputerName ...
Star matches 'nection'
& (gcm T?st-Connection) -ComputerName ...
Single char wildcard replaces 'e'
& (gcm T[d-f]st-Connection) -ComputerName ...
Character range matches 'e' in Test
& (gcm *Connection) -ComputerName ...
Prefix wildcard

Pattern Tester

$

Try typing Test-Connection or a full path like PowerShell cmdlet

YARA Rule

Auto-generated detection rule for Test-Connection

      

Resources

← Previous Start-Process Catalog Next → awk