Skip to content

DET0646 Detection of SSL Pinning

Item Value
ID DET0646
Version 1.0
Created 21 October 2025
Last Modified 21 October 2025

Technique Detected: T1521.003 (SSL Pinning)

Analytics

Android

AN1725

Application vetting services can detect certificate pinning by examining an application’s network_security_config.xml file, although this behavior can be benign.

Log Sources
Data Component Name Channel
Application Assets (DC0119) Application Vetting None
Mutable Elements
Field Description

iOS

AN1726

Application vetting services can detect certificate pinning by examining an application’s network_security_config.xml file, although this behavior can be benign.

Log Sources
Data Component Name Channel
Application Assets (DC0119) Application Vetting None
Mutable Elements
Field Description