Attackers may leverage fsutil to enumerated connected drives.

Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.