T1636.001 Calendar Entries

sub-techniqueMobile

Adversaries may utilize standard operating system APIs to gather calendar entry data. On Android, this can be accomplished using the Calendar Content Provider. On iOS, this can be accomplished using the `EventKit` framework. If the device has been jailbroken or rooted, an adversary may be able to access Calendar Entries without the user’s knowledge or approval.

01

platforms

Platforms this applies to.

AndroidiOS
02

sub-technique of

The broader entity this sits under.

T1636Protected User Data
03

mitigations

ATT&CK mitigations that reduce this.

04

detected by (3)

Data components that detect this.

05

software (6)

Malware and tools associated with this.

06

source

Where this definition is published.

MITRE ATT&CK