Find information about network devices that is not stored in config files
When configured with suitable command line arguments, w32tm can act as a delay mechanism
Detects use of time to look up the system time as part of host discovery
Identifies use of various commands to query a systems time. This technique may be used before executing a scheduled task or to discover the time zone of a target system.