EXPLORE
← Back to Explore
T1010

Application Window Discovery

Adversaries may attempt to get a listing of open application windows. Window listings could convey information about how the system is used.(Citation: Prevailion DarkWatchman 2021) For example, information about application windows could be used identify potential data to collect as well as identifying security tooling ([Security Software Discovery](https://attack.mitre.org/techniques/T1518/001)) to evade.(Citation: ESET Grandoreiro April 2020) Adversaries typically abuse system features for th...

LinuxWindowsmacOS
1
Detections
1
Sources
3
Threat Actors

BY SOURCE

1sigma

PROCEDURES (1)

Authentication Monitoring1 detections

Auto-extracted: 1 detections for authentication monitoring

DETECTIONS (1)