Detects use of time to look up the system time as part of host discovery

Find information about network devices that is not stored in config files

Identifies use of various commands to query a systems time. This technique may be used before executing a scheduled task or to discover the time zone of a target system.

When configured with suitable command line arguments, w32tm can act as a delay mechanism