1. Home
  2. Detection Strategies
  3. Detection of Software Discovery

Detection of Software Discovery

Technique Detected:  Software Discovery | T1418

ID: DET0600
Domains: Mobile
Analytics: AN1646, AN1647
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025
Version Permalink

Analytics

AN1646

Application vetting services could look for the Android permission android.permission.QUERY_ALL_PACKAGES, and apply extra scrutiny to applications that request it. On iOS, application vetting services could look for usage of the private API LSApplicationWorkspace and apply extra scrutiny to applications that employ it.

Log Sources
Data Component Name Channel
API Calls (DC0112) Application Vetting None

AN1647

Application vetting services could look for the Android permission android.permission.QUERY_ALL_PACKAGES, and apply extra scrutiny to applications that request it. On iOS, application vetting services could look for usage of the private API LSApplicationWorkspace and apply extra scrutiny to applications that employ it.

Log Sources
Data Component Name Channel
API Calls (DC0112) Application Vetting None