Home/ MITRE Matrix/ Discovery/ T1518.001

T1518.001Security Software Discovery

T1518.001 — Security Software Discovery is a MITRE ATT&CK technique in the Discovery tactic. Clankerusecase tracks 1 detection use case covering it and 3 threat-intel articles citing it.

Discovery

View on the matrix → Filter Detection Library MITRE official spec ↗

1Use cases

3Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1518 · Software Discovery

Use cases covering this technique (1)

[LLM] Host reconnaissance sequence spawned from an RMM agent context (BlueDash operator checklist) Bespoke actions · hunting DSΣPDDCS

Articles citing this technique (3)

high Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update art-64

crit ESET takes part in Operation Endgame to disrupt Amadey and Stealc art-301

crit PlushDaemon compromises network devices for adversary-in-the-middle attacks art-773