Turla surveys a system upon check-in to discover network configuration details using the "arp -a", "nbtstat -n", "net config", "ipconfig /all", and "route" commands, as well as NBTscan. Turla RPC backdoors have also retrieved registered RPC interface information from process memory.