Network Service Scanning (T1046) refers to the use of tools to identify open ports and services on networked systems. This technique helps adversaries find vulnerabilities and entry points that could be exploited.

In the context of PowerShell, port scanning can be conducted using integrated commands and scripts. For example, the Test-NetConnection cmdlet allows users to check the status of ports on a remote host with the command Test-NetConnection -ComputerName [hostname] -Port [port number].

The technique T1046 is documented in the MITRE ATT&CK® Framework.

свернуть