ATT&CK technique
View on MITRE ATT&CK →
T1590
Gather Victim Network Information
Reconnaissance
10 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Spike in Firewall Denies | production | 2026-09-18 |
| suricata | ET INFO External IP Lookup - ipleak .net | rev 1 | 2026-09-17 |
| snort | ET INFO External IP Lookup - ipleak .net | rev 1 | 2026-09-17 |
| splunk | Local LLM Framework DNS Query | production | 2026-07-15 |
| splunk | Cisco IOS XE Reconnaissance Command Activity | production | 2026-05-20 |
| splunk | Windows WinPEAS PowerShell Script Execution | production | 2026-05-13 |
| suricata | ET HUNTING Detect iPhone or MacOS Device and Force Safari Usage | rev 1 | 2026-03-24 |
| snort | ET INFO Detect iPhone or MacOS Device and Force Safari Usage | rev 1 | 2026-03-24 |
| sigma | Suspicious DNS Query for IP Lookup Service APIs | test | 2024-03-22 |
| sigma | PUA - Advanced IP/Port Scanner Update Check | test | 2024-02-15 |