MITRE ATT&CKtechnique

T1120 Peripheral Device Discovery

Published 2017-05-31 Modified 2026-05-12 Official page ↗
Domain
enterprise
Tactics
Discovery
Platforms
Linux, macOS, Windows
Version
1.4
Created
2017-05-31

Description

Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system. Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.

Related

Tactic · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · uses (58)

  • S9038 DynoWiper software (malware)
  • S1230 HIUPAN software (malware)
  • S1202 LockBit 3.0 software (malware)
  • S1199 LockBit 2.0 software (malware)
  • S1167 AcidPour software (malware)
  • S1150 ROADSWEEP software (malware)
  • S1149 CHIMNEYSWEEP software (malware)
  • S1139 INC Ransomware software (malware)
  • S1090 NightClub software (malware)
  • S1089 SharpDisco software (malware)
  • G1017 Volt Typhoon group
  • S1064 SVCReady software (malware)
  • C0014 Operation Wocao campaign
  • S1044 FunnyDream software (malware)
  • C0012 Operation CuckooBees campaign
  • S1026 Mongall software (malware)
  • S1027 Heyoka Backdoor software (malware)
  • S0686 QuietSieve software (malware)
  • S0679 Ferocious software (malware)
  • S0673 DarkWatchman software (malware)
  • G0139 TeamTNT group
  • S0650 QakBot software (malware)
  • G0135 BackdoorDiplomacy group
  • S0647 Turian software (malware)
  • S0644 ObliqueRAT software (malware)
  • S0612 WastedLocker software (malware)
  • S0603 Stuxnet software (malware)
  • S0538 Crutch software (malware)
  • S0481 Ragnar Locker software (malware)
  • S0467 TajMahal software (malware)
Show all 58 ›

Referenced by CAPEC · att&ck technique (1)

  • CAPEC-646 Peripheral Footprinting attack pattern

References