Endpoint Analysis using Windows tool - netstat

Netstat is a windows utility command prompt tool that is used to display the inbound and outbound active TCP connections. It also displays the port on which the computer is listening.

From the standpoint of incident response, network connection on endpoint is an important artifact to detect potential beacon, and having the right tool to quickly extract this artifact is critical for any responder.