T1418.001 Security Software Discovery
sub-techniqueMobileAdversaries may attempt to get a listing of security applications and configurations that are installed on a device. This may include things such as mobile security products. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not to fully infect the target and/or attempt specific actions.
01
platforms
Platforms this applies to.
AndroidiOS
02
sub-technique of
The broader entity this sits under.
03
mitigations
ATT&CK mitigations that reduce this.
04
detected by (4)
Data components that detect this.
05
software (3)
Malware and tools associated with this.
06
source
Where this definition is published.