Detection of Ptrace System Calls

Technique Detected:  Ptrace System Calls | T1631.001

ID: DET0622
Domains: Mobile
Analytics: AN1685, AN1686
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025

Analytics

AN1685

Application vetting services could look for misuse of dynamic libraries.

Log Sources
Data Component Name Channel
API Calls (DC0112) Application Vetting None

AN1686

Application vetting services could look for misuse of dynamic libraries.

Log Sources
Data Component Name Channel
API Calls (DC0112) Application Vetting None