From 889a7080b5c94d45a6fc481dab97f5353bdd40f3 Mon Sep 17 00:00:00 2001 From: Desiree Beck Date: Wed, 8 Apr 2020 14:35:20 -0400 Subject: [PATCH] add method --- discovery/README.md | 2 +- discovery/system-info-discover.md | 6 +++++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/discovery/README.md b/discovery/README.md index ff1a15d..cc33389 100644 --- a/discovery/README.md +++ b/discovery/README.md @@ -23,7 +23,7 @@ Behaviors that aim to gain knowledge about the system and internal network. * **Self Discovery** [M0038](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/self-discover.md) * **SMTP Connection Discovery** [M0014](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/smtp-connect-discover.md) * **Software Discovery** [T1518](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/sw-discover.md) -* **System Information Discovery** [T1082](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/system-info-discover.md) +* **System Information Discovery** [E1082](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/system-info-discover.md) * **System Network Configuration Discovery** [T1016](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/system-network-config-discover.md) * **System Network Connections Discovery** [T1049](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/system-network-conn-discover.md) * **System Owner/User Discovery** [T1033](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/system-owner-discover.md) diff --git a/discovery/system-info-discover.md b/discovery/system-info-discover.md index 36035eb..1edc3c6 100644 --- a/discovery/system-info-discover.md +++ b/discovery/system-info-discover.md @@ -1,6 +1,6 @@ ||| |---------|------------------------| -|**ID**|**T1082**| +|**ID**|**E1082**| |**Objective(s)**| [Discovery](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)| |**Related ATT&CK Technique**|[System Information Discovery](https://attack.mitre.org/techniques/T1082) @@ -10,6 +10,10 @@ Malware may attempt to get detailed information about the system. See ATT&CK: [**System Information Discovery**](https://attack.mitre.org/techniques/T1082). +Methods +------- +* **Generate Windows Exception**: malware may trigger an exception as a way of gathering system details. + Malware Examples ---------------- |Name|Date|Description|