Home/ MITRE Matrix/ Discovery/ T1518.001

T1518.001Security Software Discovery

T1518.001 — Security Software Discovery is a MITRE ATT&CK technique in the Discovery tactic. Clankerusecase tracks 1 detection use case covering it and 2 threat-intel articles citing it.

Discovery

View on the matrix → Filter Detection Library MITRE official spec ↗

1Use cases

2Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1518 · Software Discovery

Use cases covering this technique (1)

[LLM] Defender Offline Scan initiation - GreatXML vulnerability precondition Bespoke recon · hunting DSΣPDDCS

Articles citing this technique (2)

crit New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files art-42

crit PlushDaemon compromises network devices for adversary-in-the-middle attacks art-695