DC0114 Application Permission

Represents the permissions, entitlements, or capability grants associated with a mobile application, including both permissions declared by the application and those granted or requested during runtime. Monitoring permission state helps defenders identify applications attempting to access protected device resources such as sensors, storage, communications interfaces, or system services. Examples include: Android - Permissions declared in AndroidManifest.xml - Runtime permission prompts - Special access privileges (AccessibilityService, overlay, device admin) iOS - App entitlements in provisioning profiles - Privacy permission prompts - Capability grants for device services

01

detects techniques (69)

ATT&CK techniques this enables or maps to.

02

source

Where this definition is published.