I'm looking for a tool that will enumerate the IP addresses that a system is connecting to. This is mainly for forensic purposes, to gather IOCs. I know we can run a netstat on windows, but would like something that is comprehensive and reports all processes (hidden, system, etc.)
closed as unclear what you're asking by forest, Teun Vink, symcbean, Xander, schroeder♦ Apr 24 at 21:41
Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
In Linux you can use
netstat -ptan and if you don't have netstat you can use
and if you are connected to a server trough a proxy you will not see the ip address of that server is connected to which process.