Skip to content

DET0609 Detection of Match Legitimate Name or Location

Item Value
ID DET0609
Version 1.0
Created 21 October 2025
Last Modified 21 October 2025

Technique Detected: T1655.001 (Match Legitimate Name or Location)

Analytics

Android

AN1661

Unexpected behavior from an application could be an indicator of masquerading. Application vetting services may potentially determine if an application contains suspicious code and/or metadata.

Log Sources
Data Component Name Channel
System Notifications (DC0117) User Interface None
API Calls (DC0112) Application Vetting None
Mutable Elements
Field Description

iOS

AN1662

Unexpected behavior from an application could be an indicator of masquerading. Application vetting services may potentially determine if an application contains suspicious code and/or metadata.

Log Sources
Data Component Name Channel
System Notifications (DC0117) User Interface None
API Calls (DC0112) Application Vetting None
Mutable Elements
Field Description