DC0117 System Notifications

System Notifications represent operating system alerts, warnings, or status messages generated in response to application actions, system state changes, or security events. These notifications may indicate potentially malicious activity or abnormal application behavior. Examples - Application requesting sensitive permissions - USB device connected notifications - Security warnings triggered by device configuration changes Collection Methods - Mobile OS notification monitoring - Mobile EDR sensors - Device management telemetry