System Information Discovery
An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use this information to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions. This behavior is distinct from [Local Storage Discovery](https://attack.mitre.org/techniques/T1680) which is an adversary's discovery of local drive, disks and/or volumes...
BY SOURCE
PROCEDURES (41)
Auto-extracted: 10 detections for process creation monitoring
Auto-extracted: 7 detections for general monitoring
Auto-extracted: 3 detections for network connection monitoring
Auto-extracted: 3 detections for kernel
Auto-extracted: 3 detections for container
Auto-extracted: 2 detections for driver
Auto-extracted: 2 detections for privilege
Auto-extracted: 2 detections for suspicious
Auto-extracted: 2 detections for child process
Auto-extracted: 2 detections for unusual
Auto-extracted: 2 detections for suspicious
Auto-extracted: 2 detections for wmi
Auto-extracted: 2 detections for persist
Auto-extracted: 2 detections for azure
Auto-extracted: 2 detections for remote
Auto-extracted: 2 detections for kernel
Auto-extracted: 2 detections for registry
Auto-extracted: 2 detections for container
Auto-extracted: 2 detections for kernel
Auto-extracted: 2 detections for wmi
Auto-extracted: 1 detections for exfiltrat
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for exfiltrat
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for wmi
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for dump
Auto-extracted: 1 detections for dump
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for wmi
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for wmi
Auto-extracted: 1 detections for script execution monitoring
Auto-extracted: 1 detections for privilege
Auto-extracted: 1 detections for authentication monitoring
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for dump