DET0678 Detection of Data Encrypted for Impact
| Item | Value |
|---|---|
| ID | DET0678 |
| Version | 1.0 |
| Created | 21 October 2025 |
| Last Modified | 21 October 2025 |
Technique Detected: T1471 (Data Encrypted for Impact)
Analytics
Android
AN1781
Application vetting services may be able to detect if an application attempts to encrypt files, although this may be benign behavior.
Log Sources
| Data Component | Name | Channel |
|---|---|---|
| API Calls (DC0112) | Application Vetting | None |
Mutable Elements
| Field | Description |
|---|---|