From a0ca080ba73e10ee58784402bc22587c03a32ca2 Mon Sep 17 00:00:00 2001 From: Desiree Beck Date: Mon, 16 Dec 2019 17:26:04 -0500 Subject: [PATCH] add sw discovery --- discovery/README.md | 2 +- discovery/app-discover.md | 12 ------------ discovery/sw-discover.md | 12 ++++++++++++ 3 files changed, 13 insertions(+), 13 deletions(-) delete mode 100644 discovery/app-discover.md create mode 100644 discovery/sw-discover.md diff --git a/discovery/README.md b/discovery/README.md index c82a83f..ff1a15d 100644 --- a/discovery/README.md +++ b/discovery/README.md @@ -7,7 +7,6 @@ Behaviors that aim to gain knowledge about the system and internal network. * **Account Discovery** [T1087](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/account-discover.md) * **Analysis Tool Discovery** [M0013](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/analysis-tool-discover.md) -* **Application Discovery** [T1418](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/app-discover.md) * **Application Window Discovery** [T1010](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/app-window-discover.md) * **Device Type Discovery** [T1419](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/device-type-discover.md) * **File and Directory Discovery** [T1083](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/file-and-directory-discover.md) @@ -23,6 +22,7 @@ Behaviors that aim to gain knowledge about the system and internal network. * **Security Software Discovery** [T1063](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/security-sw-discover.md) * **Self Discovery** [M0038](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/self-discover.md) * **SMTP Connection Discovery** [M0014](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/smtp-connect-discover.md) +* **Software Discovery** [T1518](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/sw-discover.md) * **System Information Discovery** [T1082](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/system-info-discover.md) * **System Network Configuration Discovery** [T1016](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/system-network-config-discover.md) * **System Network Connections Discovery** [T1049](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/system-network-conn-discover.md) diff --git a/discovery/app-discover.md b/discovery/app-discover.md deleted file mode 100644 index c91063b..0000000 --- a/discovery/app-discover.md +++ /dev/null @@ -1,12 +0,0 @@ -||| -|---------|------------------------| -|**ID**|**T1418**| -|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Discovery](https://github.com/MBCProject/mbc-markdown/tree/master/discovery)| -|**Related ATT&CK Technique(s)**|[Application Discovery](https://attack.mitre.org/techniques/T1418)| - - -Application Discovery -===================== -Malware may try to identify all applications installed on the device. - -See ATT&CK: [**Application Discovery**](https://attack.mitre.org/techniques/T1418). \ No newline at end of file diff --git a/discovery/sw-discover.md b/discovery/sw-discover.md new file mode 100644 index 0000000..db5a008 --- /dev/null +++ b/discovery/sw-discover.md @@ -0,0 +1,12 @@ +||| +|---------|------------------------| +|**ID**|**T1518**| +|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Discovery](https://github.com/MBCProject/mbc-markdown/tree/master/discovery)| +|**Related ATT&CK Technique(s)**|[Software Discovery](https://attack.mitre.org/techniques/T1518), [Application Discovery](https://attack.mitre.org/techniques/T1418)| + + +Software Discovery +================== +Malware may try to identify all software and applications installed on the device. + +See ATT&CK: [**Software Discovery**](https://attack.mitre.org/techniques/T1518). \ No newline at end of file