ATT&CK technique
View on MITRE ATT&CK →
T1200
Hardware Additions
Initial Access
13 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Detect Traffic Mirroring | experimental | 2026-05-13 |
| splunk | Detect IPv6 Network Infrastructure Threats | experimental | 2026-05-13 |
| splunk | Detect Port Security Violation | experimental | 2026-05-13 |
| splunk | Detect Rogue DHCP Server | experimental | 2026-05-13 |
| splunk | Linux Auditd Hardware Addition Swapoff | production | 2026-05-13 |
| splunk | Linux Hardware Addition SwapOff | production | 2026-05-13 |
| splunk | Windows Process Executed From Removable Media | production | 2026-05-13 |
| splunk | Windows USBSTOR Registry Key Modification | production | 2026-05-13 |
| splunk | Windows WPDBusEnum Registry Key Modification | production | 2026-05-13 |
| splunk | Detect ARP Poisoning | experimental | 2026-05-13 |
| sigma | External Disk Drive Or USB Storage Device Was Recognized By The System | test | 2024-02-09 |
| sigma | Device Installation Blocked | test | 2022-10-14 |
| sigma | USB Device Plugged | test | 2021-11-30 |