Detection of Remote Device Management Services

ID: DET0702
Domains: Mobile
Analytics: AN1820, AN1821
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025

Analytics

AN1820

Google sends a notification to the device when Android Device Manager is used to locate it. Additionally, Google provides the ability for users to view their general account activity and alerts users when their credentials have been used on a new device. Apple iCloud also provides notifications to users of account activity such as when credentials have been used.

Log Sources
Data Component Name Channel
System Notifications (DC0117) User Interface None

AN1821

Google sends a notification to the device when Android Device Manager is used to locate it. Additionally, Google provides the ability for users to view their general account activity and alerts users when their credentials have been used on a new device. Apple iCloud also provides notifications to users of account activity such as when credentials have been used.

Log Sources
Data Component Name Channel
System Notifications (DC0117) User Interface None