DET0699 Detection of User Evasion

Technique Detected: T1628.002 (User Evasion)

Analytics

Android

AN1815

Mobile security products may be able to detect some forms of user evasion. Otherwise, the act of hiding malicious activity could be difficult to detect, and therefore enterprises may be better served focusing on detection at other stages of adversarial behavior.

Log Sources

Mutable Elements