ATT&CK technique
View on MITRE ATT&CK →
T1007
System Service Discovery
Discovery
15 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| sigma | Potential Configuration And Service Reconnaissance Via Reg.EXE | test | 2026-10-19 |
| splunk | Windows Net System Service Discovery | production | 2026-10-02 |
| elastic | Enumeration Command Spawned via WMIPrvSE | production | 2026-09-18 |
| elastic | PowerShell Suspicious Discovery Related Windows API Functions | production | 2026-09-18 |
| splunk | Windows WinPEAS PowerShell Script Execution | production | 2026-05-13 |
| sigma | HackTool - PCHunter Execution | test | 2024-11-23 |
| sigma | SC.EXE Query Execution | test | 2024-02-08 |
| sigma | ESXi Network Configuration Discovery Via ESXCLI | test | 2023-09-04 |
| sigma | ESXi VM List Discovery Via ESXCLI | test | 2023-09-04 |
| sigma | ESXi System Information Discovery Via ESXCLI | test | 2023-09-04 |
| sigma | ESXi VSAN Information Discovery Via ESXCLI | test | 2023-09-04 |
| sigma | ESXi Storage Information Discovery Via ESXCLI | test | 2023-09-04 |
| sigma | Potential Registry Reconnaissance Via PowerShell Script | test | 2023-07-02 |
| sigma | Crontab Enumeration | test | 2023-06-02 |
| sigma | Net.EXE Execution | test | 2022-07-11 |