Software Discovery T1518
Adversaries may attempt to get a listing of software and software versions that are installed on a system or in a cloud environment. Adversaries may use the information from Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully…
- Tactics
- Discovery
- Actors using it
- 33
- Sub-techniques
- 0
Ransomware groups reported using it
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- Medusa Group52 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- BlackByteHecamede · 44 techniques
- TeamTNT43 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- Storm-050134 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- FIN8Syssphinx · 31 techniques
- RockeChina · 29 techniques
- APT42Iran · 29 techniques
- HEXANELyceum, Siamesekitten, Spirlin · 29 techniques
- Cobalt GroupGOLD KINGSWOOD, Cobalt Gang, Cobalt Spider · 26 techniques
- Aquatic PandaChina · 25 techniques
- ToddyCat24 techniques
- SidewinderIndia · T-APT-04, Rattlesnake · 23 techniques
- DarkhotelSouth Korea · DUBNIUM, Zigzag Hail · 22 techniques
- Play22 techniques
- TA254120 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- SideCopyPakistan · 15 techniques
- WindshiftBahamut · 14 techniques
- NaikonChina · 13 techniques
- MalteiroBrazil · 11 techniques
- Windigo7 techniques
- The White Company7 techniques