Permissions Requests

Permissions declared in an application's manifest or property list file

ID: DC0114
Domains: Mobile
Version: 2.0
Created: 13 March 2023
Last Modified: 21 October 2025

Log Sources

Name Channel
Application Vetting None

Detection Strategy

ID Name Technique Detected
DET0697 Detection of Abuse Accessibility Features T1453
DET0642 Detection of Abuse Elevation Control Mechanism T1626
DET0611 Detection of Access Notifications T1517
DET0605 Detection of Account Access Removal T1640
DET0635 Detection of Accounts T1636.005
DET0652 Detection of Application Versioning T1661
DET0673 Detection of Audio Capture T1429
DET0711 Detection of Broadcast Receivers T1624.001
DET0674 Detection of Calendar Entries T1636.001
DET0602 Detection of Call Log T1636.002
DET0679 Detection of Contact List T1636.003
DET0671 Detection of Data Destruction T1662
DET0630 Detection of Device Administrator Permissions T1626.001
DET0627 Detection of Endpoint Denial of Service T1642
DET0647 Detection of Event Triggered Execution T1624
DET0653 Detection of Execution Guardrails T1627
DET0638 Detection of File Deletion T1630.002
DET0608 Detection of Generate Traffic from Victim T1643
DET0648 Detection of Geofencing T1627.001
DET0676 Detection of GUI Input Capture T1417.002
DET0651 Detection of Indicator Removal on Host T1630
DET0718 Detection of Ingress Tool Transfer T1544
DET0705 Detection of Input Capture T1417
DET0708 Detection of Internet Connection Discovery T1422.001
DET0661 Detection of Keylogging T1417.001
DET0675 Detection of Location Tracking T1430
DET0681 Detection of Protected User Data T1636
DET0686 Detection of SMS Messages T1636.004
DET0634 Detection of System Network Configuration Discovery T1422
DET0695 Detection of Video Capture T1512
DET0606 Detection of Virtualization Solution T1670
DET0709 Detection of Wi-Fi Discovery T1422.002