Detection of Stored Application Data

Technique Detected:  Stored Application Data | T1409

ID: DET0621
Domains: Mobile
Analytics: AN1683, AN1684
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025

Analytics

AN1683

Application vetting services could detect when applications store data insecurely, for example, in unprotected external storage.

Log Sources
Data Component Name Channel
API Calls (DC0112) Application Vetting None

AN1684

Application vetting services could detect when applications store data insecurely, for example, in unprotected external storage.

Log Sources
Data Component Name Channel
API Calls (DC0112) Application Vetting None