T1418 Software Discovery
MobileAdversaries may attempt to get a listing of applications that are installed on a device. Adversaries may use the information from Software Discovery during automated discovery to shape follow-on behaviors, including whether or not to fully infect the target and/or attempts specific actions. Adversaries may attempt to enumerate applications for a variety of reasons, such as figuring out what security measures are present or to identify the presence of target applications.
01
platforms
Platforms this applies to.
AndroidiOS
02
sub-techniques (1)
More specific entries beneath this one.
03
mitigations
ATT&CK mitigations that reduce this.
04
detected by (3)
Data components that detect this.
05
software (50)
Malware and tools associated with this.
06
campaigns (2)
Campaigns that use this.
07
source
Where this definition is published.