MITRE ATT&CKsub-technique

T1418.001 Security Software Discovery

Published 2022-03-31 Modified 2025-10-24 Official page ↗
Domain
mobile
Tactics
Discovery
Platforms
Android, iOS
Version
1.1
Created
2022-03-31

Description

Adversaries may attempt to get a listing of security applications and configurations that are installed on a device. This may include things such as mobile security products. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not to fully infect the target and/or attempt specific actions.

Related

Subtechnique of · MITRE ATT&CK (1)

  • T1418 Software Discovery technique

Tactic · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · mitigates (2)

  • M1011 User Guidance mitigation
  • M1006 Use Recent OS Version mitigation

Referenced by MITRE ATT&CK · uses (3)

  • S1094 BRATA software (malware)
  • S0522 Exobot software (malware)
  • S0406 Gustuff software (malware)

References