T1120: Peripheral Device Discovery

Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system. Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or movable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.

Example

Utilizing the Pnputil utility we can find devices connected to the workstation and see if we can use this for (usually the most common reason) Lateral Movement.

Reference:

Windows Device Console (Devcon.exe) - Windows driversdocsmsft