CmdID

CmdID / Techniques / T1614

T1614.001 System Location Discovery: System Language Discovery

Adversaries may attempt to gather information about the system language of a victim in order to infer the geographical location of that host. MITRE ATT&CK

1 program on CmdID 2 Sigma rules T1614.001 on attack.mitre.org

Part of

MITRE ATT&CK
T1614System Location Discovery

Programs for it

documented by LOLBAS and GTFOBins, or named by its rules

Sigma rules tagged with it

process creation, the highest levels first
mediumConsole CodePage Lookup Via CHCP_pete_0, TheDFIRReport · Windows
mediumSystem Language Discovery via Reg.ExeMarco Pedrinazzi (@pedrinazziM) (InTheCyber) · Windows