ATT&CK technique
View on MITRE ATT&CK →
T1120
Peripheral Device Discovery
Discovery
4 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | PowerShell Suspicious Script with Audio Capture Capabilities | production | 2026-09-18 |
| elastic | Peripheral Device Discovery | production | 2026-09-18 |
| sigma | Powershell Suspicious Win32_PnPEntity | test | 2022-12-25 |
| sigma | Fsutil Drive Enumeration | test | 2022-07-14 |