Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1592

Gather Victim Host Information

Reconnaissance 4 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
splunk Recon AVProduct Through Pwh or WMI production 2026-07-20
splunk Recon Using WMI Class production 2026-05-13
splunk System Info Gathering Using Dxdiag Application production 2026-05-13
splunk WMI Recon Running Process Or Services production 2026-05-13