Detection test

github.com/redcanaryco/atomic-red-team/blob/4d6c4e8e23d465af7a2388620cfe3f8c76e16cf0/atomics/T1082/T1082.md

https://github.com/redcanaryco/atomic-red-team/blob/4d6c4e8e23d465af7a2388620cfe3f8c76e16cf0/atomics/T1082/T1082.md
Published on
github.com

ATT&CK techniques those detections carry

  • T1046Network Service Discovery
  • T1082System Information Discovery
  • T1106Native API
  • T1518Software Discovery
  • T1548.002Bypass User Account Control
  • T1552.001Credentials In Files
  • T1555Credentials from Password Stores
  • T1555.003Credentials from Web Browsers
Open the original

2 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
HackTool - WinPwn ExecutionHigh
HackTool - WinPwn Execution - ScriptBlockHigh

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice