DC0115 Protected Configuration

Protected Configuration represents security-sensitive device settings, security policies, or operating system configurations that are normally restricted to administrators, system services, or device management platforms. Monitoring these configurations enables detection of adversaries attempting to weaken device security controls or alter trusted device relationships. Examples Android: - USB debugging enabled - Unknown app installation allowed - Developer options enabled iOS: - Developer mode enabled - Device pairing trust relationships established - Configuration profile restrictions modified