1200KM / tool
Ping — Attack Tool
Ping is an operating system utility commonly used to troubleshoot and verify network connections.
Tool identity and evidence
Included because the active pinned ATT&CK object has type tool. This is an upstream classification, not an assurance of benignness or a recommendation to run it.
Aliases: Ping
Existing author guides
No reviewed association in this snapshot.
Primary documentation
No reviewed association in this snapshot.
Connected ecosystem references
Linked tags
Documented actor use
Explicit actor-to-software uses relationships in the pinned ATT&CK source. These links are historical behavior context, not attribution of current events.
- Ke3chang · G0004 · Pinned relationship source (relationship--0d51acf9-f8df-42e1-aef3-4c86cf5ab17a)
- Deep Panda · G0009 · Pinned relationship source (relationship--2ce2f87e-527d-4bc1-9ba1-79ade0a4db59)
- Naikon · G0019 · Pinned relationship source (relationship--2a220ca3-88f4-40eb-8041-184c412950d4)
- Lotus Blossom · G0030 · Pinned relationship source (relationship--3fcefdbe-87b9-4434-87ea-996425650be0)
- menuPass · G0045 · Pinned relationship source (relationship--e5f75ae0-45f5-48b8-938f-f0d9e17e53eb)
- Gamaredon Group · G0047 · Pinned relationship source (relationship--d77885d0-46e0-47b7-9cc2-6a396c570b12)
- Magic Hound · G0059 · Pinned relationship source (relationship--27c6ffb3-836c-4a43-9862-b77c8e4a8256)
- FIN8 · G0061 · Pinned relationship source (relationship--201802a3-afae-4c10-a125-0fc4fd62f1d2)
- GALLIUM · G0093 · Pinned relationship source (relationship--090c11ed-8235-4c05-b553-749ee6497b0a)
- APT41 · G0096 · Pinned relationship source (relationship--5bfd02aa-acc6-47a0-8867-d7962ce775f6)
- Wizard Spider · G0102 · Pinned relationship source (relationship--43b9a1b5-6f95-4c6c-8e1f-59f9049e3afb)
- HEXANE · G1001 · Pinned relationship source (relationship--0ce9c0f3-6da9-402c-adc4-a001877e40e6)
- Volt Typhoon · G1017 · Pinned relationship source (relationship--ad6cad0b-d827-4182-baf9-826c6788cf4e)
- ToddyCat · G1022 · Pinned relationship source (relationship--ac0fcc8b-d546-4882-bb25-f12a8b9381ee)
- MirrorFace · G1054 · Pinned relationship source (relationship--dc253840-25d8-4080-9668-fde2fc3e4173)
Technique-specific simulations and detections
Detection links describe the associated behavior, not independently verified tool-specific signatures.
Telemetry context
Derived from the explicitly linked TTPs; not proof of sensor coverage for this tool.
Pinned research references. No browser attack runner or production-validated detector is asserted. Imported procedures remain unvalidated; any bounded lab evidence has its own scope. ATT&CK / Atomic provenance · Detection provenance.