DET0890 Detection of Gather Victim Org Information

Technique Detected: T1591 (Gather Victim Org Information)

Analytics

PRE

AN2022

Much of this activity may have a very high occurrence and associated false positive rate, as well as potentially taking place outside the visibility of the target organization, making detection difficult for defenders.

Detection efforts may be focused on related stages of the adversary lifecycle, such as during Initial Access.

Log Sources

Mutable Elements