T1592.004 Client Configurations
Sub-technique of T1592 Gather Victim Host Information
Adversaries may gather information about the victim's client configurations that can be used during targeting. Information about client configurations may include a variety of details and settings, including operating system/version, virtualization, architecture (ex: 32 or 64 bit), language, and/or time zone. Adversaries may gather this information in various ways, such as direct collection…
Who uses it · with stories on Jábega
Sigma rules to hunt it
- Linux Recon Indicatorshightest · linux
- Access of Sudoers File Contentmediumtest · linux
- Print History File Contentsmediumtest · linux
Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.