CmdID

CmdID / Techniques

T1120 Peripheral Device Discovery

Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system. MITRE ATT&CK

1 program on CmdID 1 Sigma rule T1120 on attack.mitre.org

Programs for it

documented by LOLBAS and GTFOBins, or named by its rules

Sigma rules tagged with it

process creation, the highest levels first
lowFsutil Drive EnumerationChristopher Peacock '@securepeacock', SCYTHE '@scythe_io' · Windows