1200KM / tool
Systeminfo — Attack Tool
Systeminfo is a Windows utility that can be used to gather detailed information about a computer.
Tool identity and evidence
Included because the active pinned ATT&CK object has type tool. This is an upstream classification, not an assurance of benignness or a recommendation to run it.
Aliases: Systeminfo
Existing author guides
No reviewed association in this snapshot.
Primary documentation
No reviewed association in this snapshot.
Connected ecosystem references
Linked tags
Documented actor use
Explicit actor-to-software uses relationships in the pinned ATT&CK source. These links are historical behavior context, not attribution of current events.
- Ke3chang · G0004 · Pinned relationship source (relationship--301de16e-3829-4fb0-b217-dcdfca7398c9)
- Turla · G0010 · Pinned relationship source (relationship--8cdfc8e4-b657-4ae9-b9ee-9b6107fae796)
- APT29 · G0016 · Pinned relationship source (relationship--c8a02e92-6b53-4c1f-ae1f-bebedd6bedc7)
- admin@338 · G0018 · Pinned relationship source (relationship--318afc9f-92f3-4262-af70-b2e045b87737)
- Naikon · G0019 · Pinned relationship source (relationship--4b521c7b-c66b-4bbc-847e-d6a13e9ae62c)
- Threat Group-3390 · G0027 · Pinned relationship source (relationship--30ba627f-f567-444c-9c48-39db264ca78b)
- OilRig · G0049 · Pinned relationship source (relationship--0e6d61e2-7b61-4b6c-85c7-7779125c1d14)
- Magic Hound · G0059 · Pinned relationship source (relationship--703694f1-755e-4e3f-aff2-f623ec842693)
- Orangeworm · G0071 · Pinned relationship source (relationship--ccdb0aac-24b8-4e94-a3b6-b7e1c519a938)
- Volt Typhoon · G1017 · Pinned relationship source (relationship--d3269fe9-f90f-4714-bee5-836072e9ad6f)
Technique-specific simulations and detections
Detection links describe the associated behavior, not independently verified tool-specific signatures.
Telemetry context
Derived from the explicitly linked TTPs; not proof of sensor coverage for this tool.
Pinned research references. No browser attack runner or production-validated detector is asserted. Imported procedures remain unvalidated; any bounded lab evidence has its own scope. ATT&CK / Atomic provenance · Detection provenance.