System Service Discovery T1007
Adversaries may try to gather information about registered local system services. Adversaries may obtain information about services using tools as well as OS utility commands such as sc query, tasklist /svc, systemctl --type=service, and net start. Adversaries may also gather information about…
- Tactics
- Discovery
- Actors using it
- 16
- Sub-techniques
- 0
Ransomware groups reported using it
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- ChimeraChina · 49 techniques
- NIMBUS MANTICOREUNC1549, TA455, COBALT SMOKEY · 45 techniques
- TeamTNT43 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- MirrorFaceChina · Earth Kasha · 37 techniques
- Earth LuscaChina · TAG-22, Charcoal Typhoon, CHROMIUM · 34 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- Indrik SpiderRussia · Evil Corp, Manatee Tempest, DEV-0243 · 27 techniques
- Aquatic PandaChina · 25 techniques
- APT1China · Comment Crew, Comment Group, Comment Panda · 20 techniques
- admin@338China · 12 techniques
- Poseidon Group7 techniques