DET0611 Detection of Access Notifications
| Item |
Value |
| ID |
DET0611 |
| Version |
1.0 |
| Created |
21 October 2025 |
| Last Modified |
21 October 2025 |
Technique Detected: T1517 (Access Notifications)
Analytics
Android
AN1665
The user can also inspect and modify the list of applications that have notification access through the device settings (e.g. Apps & notification -> Special app access -> Notification access).
Application vetting services can look for applications requesting the BIND_NOTIFICATION_LISTENER_SERVICE permission in a service declaration.
Log Sources
Mutable Elements