1200kmSECURITY RESEARCH
Loading interactive filters…

1200KM / tool

Impacket — Attack Tool

Impacket is an open source collection of modules written in Python for programmatically constructing and manipulating network protocols. Impacket contains several tools for remote service execution, Kerberos manipulation, Windows credential dumping, packet sniffing, and relay attacks.

Tool identity and evidence

Included because the active pinned ATT&CK object has type tool. This is an upstream classification, not an assurance of benignness or a recommendation to run it.

Aliases: Impacket

Primary tool reference

Existing author guides

No reviewed association in this snapshot.

Primary documentation

Connected ecosystem references

Linked tags

cloudcloud-hosted-endpointnetwork-infrastructureonpremvirtualizationLinuxmacOSWindows
attack_toolatomic_testattack_uses

Documented actor use

Explicit actor-to-software uses relationships in the pinned ATT&CK source. These links are historical behavior context, not attribution of current events.

Technique-specific simulations and detections

Detection links describe the associated behavior, not independently verified tool-specific signatures.

Telemetry context

Derived from the explicitly linked TTPs; not proof of sensor coverage for this tool.

Pinned research references. No browser attack runner or production-validated detector is asserted. Imported procedures remain unvalidated; any bounded lab evidence has its own scope. ATT&CK / Atomic provenance · Detection provenance.