CmdID

CmdID / Techniques

T1518 Software Discovery

Adversaries may attempt to get a listing of software and software versions that are installed on a system or in a cloud environment. MITRE ATT&CK

2 Sigma rules T1518 on attack.mitre.org

Its sub-techniques

MITRE ATT&CK
T1518.001Software Discovery: Security Software Discovery

Sigma rules tagged with it

process creation, the highest levels first
highHackTool - WinPwn ExecutionSwachchhanda Shrawan Poudel · Windows
mediumDetected Windows Software DiscoveryNikita Nazarov, oscd.community · Windows