SoftPerfectNetscan

SoftPerfect Network Scanner 'Netscan' is a lightweight scanning tool commonly leveraged by threat actors.

By default, it creates an XML file named 'netscan.xml'.

This file stores credentials in use and a cache of previously scanned machines.

Retrieving this file from compromised systems can provide a quick advantage during incident response by swiftly identifying the affected scope.