ATT&CK technique
View on MITRE ATT&CK →
T1518.001
Security Software Discovery
Discovery
10 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Security Software Discovery via Grep | production | 2026-09-18 |
| sigma | PowerShell AppLocker Policy Discovery Via Get-AppLockerPolicy | experimental | 2026-08-19 |
| sigma | System Integrity Protection (SIP) Disabled | test | 2024-01-02 |
| sigma | System Integrity Protection (SIP) Enumeration | test | 2024-01-02 |
| sigma | Security Tools Keyword Lookup Via Findstr.EXE | test | 2023-11-14 |
| sigma | Sysmon Discovery Via Default Driver Altitude Using Findstr.EXE | test | 2023-11-14 |
| sigma | Security Software Discovery Via Powershell Script | test | 2023-10-24 |
| sigma | Local Firewall Rules Enumeration Via NetFirewallRule Cmdlet | test | 2023-07-13 |
| sigma | Security Software Discovery - MacOs | test | 2022-11-27 |
| sigma | Security Software Discovery - Linux | test | 2022-11-27 |