ATT&CK technique
View on MITRE ATT&CK →
T1497.001
System Checks
StealthDiscovery
6 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Virtual Machine Fingerprinting | production | 2026-10-09 |
| elastic | Virtual Machine Fingerprinting via Grep | production | 2026-09-18 |
| elastic | Suspicious SIP Check by macOS Application | production | 2026-09-18 |
| sigma | System Information Discovery Via Sysctl - MacOS | test | 2024-05-27 |
| sigma | System Information Discovery Using System_Profiler | test | 2024-01-02 |
| sigma | Powershell Detect Virtualization Environment | test | 2022-03-03 |