ATT&CK technique
View on MITRE ATT&CK →
T1025
Data from Removable Media
Collection
3 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Windows Process Executed From Removable Media | production | 2026-05-13 |
| splunk | Windows USBSTOR Registry Key Modification | production | 2026-05-13 |
| splunk | Windows WPDBusEnum Registry Key Modification | production | 2026-05-13 |