DS0042 User Interface
Visual activity on the device that could alert the user to potentially malicious behavior.
| Item | Value |
|---|---|
| ID | DS0042 |
| Platforms | Android, iOS |
| Collection Layers | Device |
| Version | 1.0 |
| Created | 13 March 2023 |
| Last Modified | 13 March 2023 |
Data Components
Permissions Request
System prompts triggered when an application requests new or additional permissions
| Domain | ID | Name |
|---|---|---|
| mobile | T1626 | Abuse Elevation Control Mechanism |
| mobile | T1626.001 | Device Administrator Permissions |
| mobile | T1638 | Adversary-in-the-Middle |
| mobile | T1420 | File and Directory Discovery |
System Notifications
Notifications generated by the OS
| Domain | ID | Name |
|---|---|---|
| mobile | T1627 | Execution Guardrails |
| mobile | T1627.001 | Geofencing |
| mobile | T1541 | Foreground Persistence |
| mobile | T1430 | Location Tracking |
| mobile | T1430.001 | Remote Device Management Services |
| mobile | T1464 | Network Denial of Service |
| mobile | T1644 | Out of Band Data |
| mobile | T1635 | Steal Application Access Token |
| mobile | T1635.001 | URI Hijacking |
System Settings
Settings visible to the user on the device